MAL-2025-168873 Malicious code in technical-aln-tol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5759f568637846fb05a3b8d702502aabc855ddac1101c2bede7c249fa19d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150007 Malicious code in @mipta1/ersassdta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834cb54555bb87589cd722bc7c0f61c27fd7885419722ba127c0eaf12313e005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-list-patulimbaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 467c36520fbe74e8d3809209bdf75d62bb23ac89ee1d221bfe0ada770e09d2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gfosd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865245e08ef95c42fd4b6349f36cf1e659691a3ffb1b9aca3d02d3f19da70dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166880 Malicious code in teagood-lokika18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7a4d82214c9df82f6f18bd323d648700c2a9e971affb395c76acc4bbe592f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155801 Malicious code in huda-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647bdcd3a4281178cb061a04f4fd74fa8be4dda16cdb63214a9d478fa4999b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165786 Malicious code in sau-nakiio-ups012uiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7ddd2a6d53810437494e3b0f25f753d49ec3c6fe58032895992ea891109456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152842 Malicious code in aril-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4909e97a9b2ffb1fcfaaea7df09c6f7df2278e1b199278fc5d7ac88241cec4c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158747 Malicious code in lookingan-namala36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98a59181fee54c076409bf37237347ee3a9a7a8b4ed1f8e7afd3fc7f0df1b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163353 Malicious code in nokire-rara62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f44ef4b32e061b358ac93f47607cc0557e8724589e52cc49ea33830a05a391d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153387 Malicious code in avminh-afais-fogioaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bfe5990250c5972b2e7da729f4269ca6dc705782aaa826a249c62f791d1929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-muatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ec501e53226894a716d19f100f0cb51b59b14c636b4ef8e709a70db4c2f35f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb4cde12c9aa1947b4271f180b3880cc5532eddbbd33e341b1d2875f59c51753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhyu-tanad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedb166912d38ac5711f662822f89af003a4874b545e68c12b11f9f1ed61bcc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-2awsaa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3540f27782ed1eeb40d58f072993f48cb7496c7cb787444da83ec73073fa1fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf0d471848dd5fd3fd41edaaa9e968fb0c32f4e65755262ceeca0f79596df19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc4713d4b9d2d259ee5d2242608a74235bbd07bf1cb27fd6618677af5d06904e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-natib-yal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5508e847d0d611540c038876ea13ea19e0ef4b27b7d1345f6876abc19dfa37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156496 Malicious code in infi-gafob-jagitga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69295d84d226a8383c8fb59e7f24a8ebc4fb78d38a85a277cbd496c3f76a9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156954 Malicious code in ita-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71bb2a880b3c3d7bf16972cd9885c105e7f205f886caa06902c1f8488c1eae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...