MAL-2025-157404 Malicious code in kapafovgfiaganaao-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a421f82914212a9e195c19b0b04bf09620780955493a8fcd51833d60bd9f1db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159328 Malicious code in manadi-scaisor-didadfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce259255c3edec5039b83b260d5fe328379d4ae93be8283874c3cb8bb37dea96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159244 Malicious code in makanabi-aibia-ufuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33fe051c8e7d67565ae463dd856e23e2b04d9ca0ca6aee6166c2ef56d1683323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867da6405a8575da4c58ccc9514dc57f13a3f17cbfe0a019e3ecf500c9a2bf9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162746 Malicious code in nokire-korean15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f63b0c345bd47e968ccbf0b08f76f072a8a6eee495ba2e1bcbc563e2a746681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c033251b3cfc0dd04d1f3a7afeafa1e5b4ab4d944bc0ea061a8894c14fcb78f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-ukuta-joki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b03acff4aeb5571744c1edb08426d6519a2e6704e10b697d6a2f11f0a7ff1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160182 Malicious code in masauan-ofa-batovuila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5fbc712c4eea7e4f5c1782babc963680361e250beda10ad81bf048298c92b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/dadfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c00e54b29699040e7eabcf444c969e1dd6b1f9372a24350ad83163c7e7ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d013e0d2eb4ad41cf6e5409e2ab5d85122960ee38a6ce2a81565de8d9099def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbian-ifbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719c184eb94768000d26e09da5d4175a39571e54bd60c2e4055815035bb4354c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-aldofa-mafgusdfkoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d444e537ccd79d078cc8136a81a7dda71fa732738db5cba1511fcdb047ddb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e9e13f6df76f6ed60d254fa5b6694e16cb4592892325f481da043858c330457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159454 Malicious code in manadsi-sfdada-mabdva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f7e08ba333aacc94993e4cf1f0034b843d08608ca39c76dd96e0c8c648ac53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/dsfsgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979265774e07143b9be51c21c3ead4a3745f90fec07f362443a384021e413284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164676 Malicious code in rino-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323c4203bd3f1881f6dfe5e388f9ca02ce9f1cd2b7d5a21b1ef75d6e8b314d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d8cb4b1928f5d22ddd6b976f6aac5250c635d2737bf95ab9539f712e8773ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/irdsis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7998fc2a3b80c790febd333588245044351a06ec14e1742f7761d719381cf78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166555 Malicious code in syahlan-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a696c4ef9d0cc0170fc7b1286e1ccea65b9eefa9127d08e774fc9215f846d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbf05c5cfad396a8ab230f6587b63401fd21821cc0c5b5208add0f5ba394f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...