MAL-2025-154725 Malicious code in dioalgo-kloip-akag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18a6f81fd36562e4e7ddc9a6f6b1cf3be7178b75578174158e9fcf41c65928b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153999 Malicious code in cara-bsunsn-jsaunso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f93d4430bc0e5cd4cf7d848aa6c3fe69d26ecf05e71000ddcd3bdb573aee30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153621 Malicious code in azhar-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2f1d6c8a46fd8254cccc844719ce6d91c511caf1310fa4643e06b3f4c1fb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a335f9b0e97cb47f8f77f13534ec4071988c6ef25886af276ef34172e20e1ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a81bf00ed6327a5c966b64f36d6a64b8f3c0587ccb57708c1faeb216e66056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157607 Malicious code in keyla-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c04d2dce27baf650b45ab6bb757954893aa4d06f0c6494cdaa1b2a8d407298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155616 Malicious code in hafiz-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e32acfd04b1b18ee1a069193a266533e00f5098f72c976b09779f0bdbba187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170355 Malicious code in verify-ayai-galkia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e639c647dd5e1582f798c675d057d81ee9b96810b799d4b1d327c5c065134d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166754 Malicious code in teaadgg-muni-miuyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc345ffbef1cde3213d878a22bba3b33ec867110c882239a569e7d52a1d6bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168892 Malicious code in technical-alnbio-tolimasyur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf863fc1b2564b54f16ccfebae005d14482b74d4e2a5d88951a7c355505d3ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158038 Malicious code in layla-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57721f492b232b48bf95f4fc938c8f04ce6d47a042342553d94ce642b57b716e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e33681413598457813d97b8dcba39cfd4e87ac5d620bc1ea6aa520944c3bfd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ad-ifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f8d74f4ed912b862ca8e0b98d185ce5f7864622d154dc539f85d7cfb37b5fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-codfd-mantap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27ee16afe705e033f8d2462c9b90ca36ee861fd78772569d8f3ed700ff63acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jinnhifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db62856f904dea1439ddba3ad72277211a4ec64e2f3dfc674f04c74803d82650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afoaigi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdc2651ae57f4c30264a33c1504b96742a2715c42d1a517ac7251608c54935d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161908 Malicious code in nasrul-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1224952a057961e451cc2130994a8e599b8046f301712d288b7d3ea15ad7e339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-nestjs-orbit-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4846b16e10fa6cb6232bbb3111de62fd9b9062e8b834653bb3ff95361135b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-upgrade-library-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b7436d1c19bd4ada5702cde9f3b4b860ec5e5c962dc062ad80ccd76e1a57e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-unuk-fornax-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873c6d5647614d7f40eea38f0fe82b134d0919e794148e573a07e750253968f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...