MAL-2025-152137 Malicious code in akabia-aliga-aiamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da23bf5e620fdbc39061da5a50fa49ad0a05c839b0a89827531b45817a015b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158147 Malicious code in lina-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8529719aca10cee0a9b63b5d4509134e7adfcd409531a8cf0aa497f62482ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169605 Malicious code in uarg-mthai-sufatiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d17a6298b517027534fc4aafdcecd4dc6ae5680661c784fdfc26964f701c98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163835 Malicious code in nudela-rahfeg-agsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 030a129f0a1fc6acda43c48dec05a1ebca673b8a803ac3f4012299603b9aa965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158661 Malicious code in lookingan-namakita5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9810e24aa2678b280ec4aaf8f86075d424ac5ef063aa2b377e95f9cae8c9b475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150201 Malicious code in @mipta1/safd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cf6f6f565d607e067ebb0d5c4c989db7544f80af61160fc38c2c3e4bc482d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169179 Malicious code in trevora-cir125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631bd1f90a4dcdb35269e3b28aeb97d665ad5ffe76d3c398f91d1abb41d7ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159223 Malicious code in makan-aiuga-uyafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5cce71e957ada48bae69fbc0ac66cedc622e73c36ea69e4aeae4f3a1dd6867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163331 Malicious code in nokire-rara42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adb3fbe78dcd84c3ddcd57a82b7e8f05bc067e65c80927fdfe678553d24da9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168162 Malicious code in tealove-boy8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e51681516a44759209470d4bf83232ce1964a3a3be2f622b466e922350d308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168133 Malicious code in tealove-boy27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5af24f2b8ddc0fac5d0cda540751ff372c4be54963060219f74e67905b2466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163041 Malicious code in nokire-nakala84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49bfc83b5ef8911d9783ec4b57a8bc054bb17c119d65483d93ee00abdcc66786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fdc69d436002b78bb99f6124cf2b8fbe53ce45e34b63ae47137579b9f1bfd9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idust-dajagaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 551e2df43403bf0c0127f67027d64e2a0521c3eefa28eb69db7e0586d9a1dc6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moilopie-armoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b49bd414f3e2f06442aaa7270a5c7139335b972ba11882035b20fc90c26ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-nalasaubibaalui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6526520966a736ac1b6de55cf8a80932de01151ab1edc2fb20f6eaf0cee1a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06438096e82381636cd6c0104965a7a4fc4ae87e9a92e933051043a0d017b9d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a3462de3f9204eeb5873f4d960e71dc6c1bef331be4215b82af575483a7807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilau-akababaliu-kluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc4663f3f84f0ddd9736321879157e96a94831e8644d116702a9e2257e7fc8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/s-cisreh-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69b969494a1490d5dac49724fb90e10c00bf42b3a1a6e729bcff3b7e8f325e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...