MAL-2025-153501 Malicious code in avomainah-fragas-ofafuafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f61984273c4898f287f6c03125d5878408c9387a9ad8037d3288d005950a4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151998 Malicious code in air-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf816f69d56956ae91216cced8d4e04c876c6e1eb0e17dbd136109630fc8a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167144 Malicious code in teagood-manaki76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d60fc14c74dbec7b8fe5b50b19917ee04a779101607e3a4e43f030d57a37fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163086 Malicious code in nokire-namiresan34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25c69f71fcaf968f7f5a869b3105f22a63889c1d4fc89a49e2a9987b1029301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161462 Malicious code in nabuf-otimmn-gaoposaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20784015787c2ac5e83eabdc870a171609ad9aae651506fd1c4f27ec4d372898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161661 Malicious code in nabuf-otomabin-nokjgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc637a59dbab10e8313b97c4dfd72e636fbca53d35c5c8fbfff2e596b342be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150925 Malicious code in @miptaa02/rusem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0d73ec9a30bbefd994379da9cea59e499532442c7e150d3b61b51cd5b1d4f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e17f2d7be616295578fa0643425f6e8b123043a645f43148571236a710da9e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2542c3363f4be2de5910b6b96ba9266ccb0701416eb19cff39e1c39be5fc66e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/hahaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319c81a3f0cfad247d12cfc1bd70cfb28e1f38be96aae73ec64401888da4b36a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d5dd0f84f6a1f423936b8edf1b55f68d9abd101ec56f58ddaa20cc645522c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151616 Malicious code in abuni-niaia-luhubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a70ea822cb503a3dad034f66559ef1dca2d75624c0c27b9ee8d1da06cd7a7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5b59f39439b0fb1d311da7e9b4f40301bf2f1d8e65f6389673b082768fb640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155725 Malicious code in hariyono-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385675710dde9d5a43a1a5432a83a27dab52db2d7b97be6468bb2ef0c85aafe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156073 Malicious code in icha-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ae95005f7da448312efb9d977bab304f3428bfc92826a0e539bc92f3552003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nati-ylara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc78f645af1c5ac0f28d14021662e1c9d44a3ede40ad2234ef1e4ac20ba015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156316 Malicious code in inagi-gvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8dfaa9e13485562114eee2d3f153bec3bb4b3814012c3aad88ab9932267df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150386 Malicious code in @mipta19/ns-s1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547e43b996bd5dcd3fcdcfcd8fad184945aabe7408287baa2d160ffa1fc711ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-xerxes-changelog-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0175d3df92c5f5ea2098b26de86bbb5dfcd75cad02a6e06b6ef549a7591cfcbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-zenobia-package-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d5bb8a735237ea7373c3f507ac04632de6eb775b54c59acde7690da38a86ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...