MAL-2025-157517 Malicious code in kentung-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c1f22112209364e6d6714d30d6f630e9e8b9567a8735de09fd5023893e6a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159480 Malicious code in manadsi-soradidaf-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a81c7d08faaf5c1d73f3c0ee6b1b8ce2028ca74be911a7c59be6cf802c1024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153112 Malicious code in avminah-fagias-ifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af55108e23ada1fa86bb9d6055c44ebbec8b915958223f0bc0b70403f0d22e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159274 Malicious code in makani-aimoba-ufiyvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6622342366574544c832dbcf5d7ee72c2b0a9cb09bcd89985e02d4aa85d371f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159484 Malicious code in manadsi-sorddi-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b314f227125d9b4b19e9eea7bf6e382bbf03b1c0399e40eac00131db135c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160951 Malicious code in munisdr-nserf-saafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20aef3b9a0614a926d535ad50a6419c1db97b7075a89212120bddd55bb5f1f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164503 Malicious code in polymeria-yuio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890769202b938529972deb19414a72703b371d94d74251b2d3a9bb6a733019a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161792 Malicious code in namae-nadugsua-maav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb00ad095693f59962db6908ba018201a793f0066b8df4be38fccd84ba7ee44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170427 Malicious code in verify-aysali-aisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6459c52d691ee22a51528138f617ac9aa3c4ab69eb176e1d1d6e2cae314f0e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gr-nutr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dbc195bc1405e4bac620decabb079bd1dbba43bce25f06d0c8ebc48094ebd80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159328 Malicious code in manadi-scaisor-didadfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce259255c3edec5039b83b260d5fe328379d4ae93be8283874c3cb8bb37dea96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165747 Malicious code in samehadsaku-qeupss-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2712a82241e1a822031999c31c7f69b01cc5075030ac296804b15c2a98048bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165674 Malicious code in saku-au-idaduafan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d471c88582a1530e923b9b1bf4a2e870abf9238a88dd101592d0ef2380c76d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154568 Malicious code in dian-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf11bdfd23cae73c5823f63e3759aa47c38e2b27fbc381a23f409d66deaeacac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164676 Malicious code in rino-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323c4203bd3f1881f6dfe5e388f9ca02ce9f1cd2b7d5a21b1ef75d6e8b314d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167640 Malicious code in teagood-nalikoli81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ea148c97aa1fd69fdbe845e612066dc8b9105f53e630336ceaa6e0a0ce2fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a31fb2cc5e68bfca49353b672f984dfd562946664ed641bd23eb4bb1a26fa71b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167925 Malicious code in teagood-yakuna64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7493796bcdedc82af5dbfba04607b3706bd6a6328bd2ec5bb14d6e9dbbba8067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kkfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9c03646aef4f204df13e28033da7c6ceb36c4a2b74970425bc89b23a3a3a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otatu-umita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ba5233f4a2524671edbd0f98edc3746caba241b157d095e013ee61fed750d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...