MAL-2025-154762 Malicious code in ertacssau-tery-munc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5e4d8ac0b7c61e741802d24a87f4ad051aed93eb9c47f19c0c75ca60e46f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163513 Malicious code in nokire-zabuza25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ae9944b77f86d0cb1511a54f74373cb9f4bd4fdb57419953d958a737f9fafb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152887 Malicious code in asd-nufgttr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d5f69c15cf270b02f1b975f72f44bf6a61a3c7eb813f6e1170733445b717b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168036 Malicious code in teagood-yakuza75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de90a7e4b0aa306f036dde913f93ff092e6f01c2375a6e65121f0b2a0059bca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162988 Malicious code in nokire-nakala35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f220ef0ae9134f6102a3b77c94b49bafcad33b84a891e1925eb895dea092847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162010 Malicious code in nasution-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee61eacfc5eb298b82734ac8699507dd2f4bfa68c508de2fb41363d9a0efc810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166522 Malicious code in syahlan-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ca17980e0546ffd615753902d9bac863adb90f4ad069307ebd0ba052c6a906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156013 Malicious code in icha-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c963df8d03941b7fdae383467ad355d3bf0f1ca8019526a99d78042fb8ba727e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159804 Malicious code in mansila-tfla-magolani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b533f2aed5ab79d9f45dc23b73606fe290cf0e273662c13aa7a7bc594087ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150662 Malicious code in @miptaa02/flage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30473b323aba80a6b0c48bbf174911390c723281b21aeb732a615332517ea89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167385 Malicious code in teagood-nalikami112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9d33356f7e10e00d195f07ee31352580161f2f60348e80452a9578855d2891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151090 Malicious code in abang-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e114586de5f2db3a0ff546f47119f254cddb78f5a57ffeb150461a687cc3341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153294 Malicious code in avminh-afaais-ifafoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a686910d3b6abf95bd9a0524e2c88718583d2f5db4afc7a562097c78529c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fianuia-jinanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5700bab68c73a2f399dfdd0c5b50dc351fda84fbb5258a8d769b99d3f81dac0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-nutyasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b055ba05ba5c7f0cbea9ed05886264a77899fe3f976b11b33dc3d77f4d2254d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6377e1794c1849fa8628890544c68baf073bbe45a7235bb73cff0b0fd2dd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b96efe30a321edd185528fd732979519a77313208180ef7d6888b58968a327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5b564be55ea704321725a9f460e8bb074cc8021b01cb2b761a4c8dc5893c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b517a0051bce047e1a9b8620e4ccf0236665816c8b44d951ab76697c2e784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubalauvalio-ilugsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b859106c7cf7f73c8730980b4f69adbff332d9207104a6f345b39df99ee2c361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...