MAL-2025-152490 Malicious code in alvira-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca25fd7d20d7b0ed64cb7e95edcd59f6130efb9ee0fb5c0b5b290f7c8b39523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f93aa6ae25235e2aac03c92b878b9c15296abb231c79555a2f25603f6fa4c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545bf23405402bf08e2f9020d239e33ce45c0b7ca18492ff9ffee07d48feeb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1003521e016ad84d5306966d038fa56fcef3e074e3a00e46d6383d10ea7f549e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63275f8cf6b568f78bdd9b43df7f1557add0b45d97fb967f5b370d01fc81b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimoaigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b37634e45ff2d75e7ab2cb02585cb6ba524e07f15ca75cbacea94760de48e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-nur-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0057d0a67f3c6b92fb4109bad7aa684cfadf6f9ccadded2f9fb46302ae9f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666b9c68a57017e77a7bbd80cb54c1170283a7468ce4b6c98406cdd924f2c13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzimub-ilunoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8510a779e57ce3e9f6a23b68d69077773f427c410b50c21527703ac2a7320fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3230ae0313f320e582abbd782027e718018dd2f1773e2dd7006fa41713c0eec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ed1c8316b68e72aa26895c6201cbae3e15557c236cc97651c4410d32138d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-babinakam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e960807fea277da8f6bcf8231202e3321cc1c004bb345d6a55cba426b7b91bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f41288741b796dd8505ebbb21f7f5e095f0476b5ab46da091f95a7647cda3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamoi-alalianoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336812a27247dd90b70ae4e6d0f36c6575bab137e0e4677c7bae0507420021ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154332 Malicious code in dia-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b135a60d795b28d289dbaa7aa9784382e965bea841d7c65659d67dc281ee470a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158372 Malicious code in lookingan-nakomi15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c2b5267e0e67f5f8b294447a4ab9b9276b77e050294ecc8e5cf0571a7ac8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159417 Malicious code in manadsi-sdda-middarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0953b16a1191bce5f44e20cd49f8d13b48b21fbb297afa2005bc8f1cf9f39ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163862 Malicious code in nuilava-dakaodfrae-nffamhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7bff3222893dcdc931c4987037f1b374279bbd579d462ef5a4ca40b4c7e08a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159141 Malicious code in maka-angi-gunalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e913407574d1b4879259d4f2a9d8515308dcff86ff2730263e0a371d83a94e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151819 Malicious code in aiboa-mioloipe-agatamiaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2af38e8b4d6a2ef3a6b9e9731bcb9bf7c3f0a3883fc9bbba32d7547a964860e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...