MAL-2025-155158 Malicious code in fitra-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638290d39741b0bff7d8f82cb35434b6d14fa8091db6c13ad218af335276df97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169840 Malicious code in uinsu-list-patuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6af4967193f23b17a8b53bc2398577729c61975e7962fc0272f7a52b334054e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167678 Malicious code in teagood-namakai25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a08b4a24b9ffde8aa6e60beebc52ee4a2c36cc930be6d82a5b5eab83eb5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169956 Malicious code in uinsu-lot-babiam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10e398bf8ed1b57ea886aa3430f536ff13c0780295a3d5118b216dcf320f24c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158777 Malicious code in lookingan-namala63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae6ce9e94f95297dc1ebeccb23f0f1c17f48affc614a56501dbca40c894e9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150966 Malicious code in @miptaa02/tdisd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9e4547d7b4a329f876d3a879e197a812c99ffa7dae5be034cd90967e281f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163496 Malicious code in nokire-zabuza10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d691f5e196b1340804feafbb3af1d77ca5da8000e5a14a13aafeb9757f88a35b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154141 Malicious code in dajouka-d-rlac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5cba4bea4554a4914925e047446bb99538e80eed4a16d60b2a27b9b7684aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163690 Malicious code in nudalea-ofofiari-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c102ebd82fbb48675de94a56b993d94327841c9af5fe0979592a803752becb55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150557 Malicious code in @miptaa02/dadfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c00e54b29699040e7eabcf444c969e1dd6b1f9372a24350ad83163c7e7ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152343 Malicious code in alita-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2340d7f981f1e690c72524cac5283735f5a5cf337b3e9185667d0a8ce61c0071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167172 Malicious code in teagood-nakama100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9371d6ad7994aba4486a94707909fa6ffb444197fb12ff6f7f49924bf1c242fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161828 Malicious code in namasae-naiuapa-sosamaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c831c30f723ee93c9ba47e87ee3ba2217cafe00559d276ad3dd4d6fea756316a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168322 Malicious code in tealove-lady17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824f319b828bf636cdcda7c305da599fa52f1e75950e7230a4a9b5432de3db2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155096 Malicious code in fisdnish-sf-maegwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5002cf872d174e10555b978319bea9ce416797f37e8cc11f60440b087a5a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-sync-koa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532009f657580cbf19bdbec5522f5677ade66238901cab4f4b3a95a524b4dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-flare-axios-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc24605e17194bd89712ce51c79a66995a448dc7f7d583a8ffe92cb6eb13392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-celeste-jupiter-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c205fa2d6d2d6c34d73678744fd7def89ad1b39c74fa0b3b2b31c6ac339b42e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-lacerta-axios-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff96bb432e59f1814f6243a71d0cfdb66f94102ef9409c18ddc27145e2d95e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-centaurus-yakutsk-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf37872579d57c7904980d46accf7a399584cfd1c2f943c8c74688895d68442d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...