MAL-2025-153805 Malicious code in bitha-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e54e20580c3f7a9cb385ba037ec5daa6339ac2414981819da936f39d4af950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156847 Malicious code in iqbal-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad72580e6aa3d669ce3aff32962a1a76a1d549ec14a6b8520000263d5b796ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbecf560074c5d52e809fd273273bfa13b7fb60b5156e276e1742326822fda20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabulai-nali-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342dcacce0a1fd7afca33639b6a843dad25632874220b6f018f39f862e9c61de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc12dc66ac7599b9d7c68ac157e1610b7081b21c2e0d06b1a8521e01d5a12756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-muio-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9d15d66bb2d5707de9b63e5ba11f9149f172c8d36677d190e5c6c6422d21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153212 Malicious code in avminah-fagmas-fogogfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f85ab00c0c95eaa805dc2578c37108d3a95def17b00f47e7dc3a455ad15fd7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151331 Malicious code in abih-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b413d07012ad3fa067dd7c6a023b0c4ac338d5249abb1b01ef68efb91f5ad54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168795 Malicious code in tealoveness65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26aeae99b37fffd4839851c725a48414d92335588bb418fde6c953791598d501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-murasaf-mant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9968411e5face8b7f5648fcc45bbbd0a34395558d7c9bac39f0d6b3e6839589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154881 Malicious code in fadila-poke146 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9f49db90e4821965f3c5d6fe2ccb9b2ea4474c7480a8da898f5f40638d947a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151699 Malicious code in aciaiaggu-idat-gda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e79276f387ce9e76ebd72bbefede4fcb12d98c4251473c647aeb02dae0857a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162213 Malicious code in nokire-abimanyu94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3436241247c7073b0f2d2948a6f09ae1f7e494856c92bd73d708a564e6fc925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165580 Malicious code in saku-ai-ups012uszzgxgiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79186aa65a8793620992b9d71a49ea987553eb8a50e349179748343f218d83f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150927 Malicious code in @miptaa02/ryu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d13179f102eec07c6341f33622a11cb92adfa7a4ff32effac30f1a83b84aad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyufafu-dafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50432a33c0b8bfc779aec96daed141a1329c52774f6e486d208956cad6506c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahfaeg-naahgsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4db6d7cf98451c36e60a20b7fa92fbfd978ce67cdc2509862faa304b8311141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae2f088b849eb5923bcb0e31d04593a58855d9d9cc0075e35d14ae9fbc75a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagnias-iofagigag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebf8d91a006dcbd536acba2bdddde69cd50728fd5112126d3ec6614701d1de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-thail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b53e055514737efdb8eafabdcb637734849cd0d75e69ac84fcf7a9ca230dc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...