MAL-2025-156271 Malicious code in ilop-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cedefbd86e9e3fc160743282ad792c645b3c5551453755fe03a0bbe74c992e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155392 Malicious code in guras-darusdall-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e3e65e374ee0939c68237de420366e4193e8cc2f06fc2dc4035f5efef8e6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160233 Malicious code in mattu-miotboip-nuyadrat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d05ca0ac03dce5157e92e8215dee8ca7f250172ce9ae435a8593739589ca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160198 Malicious code in masioaluan-ofani-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b8c645ecac86f259e474705dc272e0e1dadbd65cc29528edbbeef36ccf152a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161636 Malicious code in nabuf-otomabin-njsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecdc2fb593a4e7c053995150d68382b9c22f55498167c316a366aac713532e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161241 Malicious code in nabila-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0469ecf0472465f2c8789b10dd1b9b5d00a0165ad425596dcfc2453b76eef8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150262 Malicious code in @mipta1/sura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5187ebb8018dd8c4e964433cda3b616c596dcb42b06c1d58c25fb00e05a039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153055 Malicious code in avminah-agfifagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d0c921de549bb95c3914920378ada8c9e0c5e8ee89902327142fc6868ac398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154181 Malicious code in dajouka-scelas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2f38a3449ea54ac9a292683799d52e4f9b6eb0bcdcfeb1e35e297d1477d765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157378 Malicious code in kamasada-nuyata-budadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d042e58657be8ca772b8e9dd85057c3169332242d42e818e861c167e8c19857a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170557 Malicious code in wulan-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec088bf5091e555d542897205341b35fc398ae9a949a12708ad473a47fa5735d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163803 Malicious code in nudela-ofgaf-gafohagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100226555d0b4a91de69298c3fff2af9c9bfcf2851c9e26918435378d67156e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160309 Malicious code in messi-djhhoyi-fssae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a721694127e3a360f13dd96bced35bf2e7614b40590f4608cfc257b9a6f962c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7eb55b07daf335a2f75e032e4041c32e8b2e6ab543d1da7398861843d462ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8051a2e18a102b0ae2d3f3576d362e9fb1fb40e8e9788bdc993db24d4ce63a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgvila-madasazhkofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5b9361bd2b69dc41485d0ccb281a42dc6646246a5c7ff3046e95340ad6d311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimmn-afa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1720f11ba675fef2d4afc2ca5f63860cbb1532c4b71649d734d3315bdbe47454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sxhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4372c71d31910339b01b69cc668f7930ca0a4b97334dd2365fffd36d3ca904d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyasada-dafdadir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32dcd12b5f69b7d592cf97a552f386a0850107f02fa6d5ef44aea6a7a5dc6702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7c3d9d70c0558df4dfa688977afa58004ad1dcddb1a242a1510755e130a555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...