MAL-2025-161116 Malicious code in mutdaufs-marima-bustyasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9283e2eba0d23a56e7ab32b39366a763eaac78f093c69f35f14a860794eb721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165530 Malicious code in sabudaaopa-muyua-bafug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0df5d9d44258b3a54046f865bf46c41becc680fad6bcb4b81e5e30a78755930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162566 Malicious code in nokire-genji74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ecf4d9f2e4bbada27a18e7147e5652af7ffbefae9fec52846a5c55c4a84896d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161808 Malicious code in namae-naga-nuaao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc1e98c19a4ac4173bec5501827582e41de31dc9a7443a3e43efb39896e330e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162877 Malicious code in nokire-loklok25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ea410f1e35b9b184d0a1e54c21d89c076c3016c5d673b22e47581b46e5b253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169613 Malicious code in uarug-miafi-suatafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d088ddb8b2df103b40065871f8340ecc4676b15fe2b6d02fa00618a1799545d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164055 Malicious code in parwo-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb8dd1d214948ab67d8c84bbc8b25083de5ffa0468e4422402ac0181bcac9f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151041 Malicious code in @miptaa02/xdz2rdtj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483eba19755acc71733826a3cc7f3120553f4ac7fd6d564fb830971fa4edcba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170183 Malicious code in uyafru-tuitat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0648ed55a78ac84dd823d7788b232abdb7d86902d9635fa58c33cc0efdc2fbfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154813 Malicious code in ewa-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7600881f01c6bb98a8067704d89dccd3ff1345b4ad1b368a247e31cdc103e164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165774 Malicious code in sau-naki-iyuup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ca3d493f461520e274e6c284fc7fd325bc90d31cd5669ce6d489bcd8e890fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166268 Malicious code in sunden-diak-nulamakuiabin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c23dc86c0b07f52554812e151279d507afeada1ea188b4d1c03040eb14bb65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155626 Malicious code in hafiz-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94b05fa5627a633d0a138b2596beb212ca92400f60478962708f6aa0a52f435a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadasdhi-ert-tersb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30796b7ed14b2d7e948c66b67077d13a43b17cfdd671c4513b855e7e30265157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uyilu-vinakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2602301852f9a67b982a759505d7f9055825ff2bb25ce6d2928e60687126ba9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca9a0e4ce022828a0a5e28fba2b89993ea113b7a44ecc93923890e931f4dfa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74aceac21cf4beab15a9c6005441f38d9da5c6a4d254cc05628fcbc32cdb0fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/dicassx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b685cc49c5e3b5ebbfd72bd986ea4c81ac6d180c2da090c250f759c25ae749a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aliguamafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be22d19b71d3644ba5751fb6a8ff63297c81528be4c805c35d59df56087e38e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4840e37b4c52a5531890eeab3169b17cdc55b8a9951f4c7c8ece98a94abdb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...