MAL-2025-168939 Malicious code in tehaah-codfd-nutdara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ff1d6ff69fffee1ef03e8cd25e867c4b66a8787e6789f9d4198730331d1011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169518 Malicious code in uaragifa-afati-urufuafayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e386519295be1fceff16497e7929ab0ec7108b32efd0a86c40f866a5a3e6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168370 Malicious code in tealove-naiman31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90552f97c2b5619b8eee8c7f82dcb83baf8060e82aa2aac5e477f7739b53561f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162274 Malicious code in nokire-akaza6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2a40ed9f44b30ba1aaaf2d470047f6f9a74a5afb33c7d2168eb021325b650f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158665 Malicious code in lookingan-namakita53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30509c490e8f2112b57eca8930e160c2af0ed7ed1a7defbfd88f77785ed2e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151595 Malicious code in abuibanua-mbian-arta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c93f412e659323e704a38e15f3e7b1ffd10f998bf13fd2d8c2012972415229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162612 Malicious code in nokire-kilua25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0caf0e5601d912a1af8f9a816436ce7d612534ffa0f05b60e3b3b2b2ede7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb15e2de0dded4a526607a38900bfa3ca603d932153e155516b48a2934cd5cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156120 Malicious code in ilal-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445e193733809ce658d21380c60e61ba5999aad1642a430c5c0f94fa27136c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ewias (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a60cdeb026fe07f6c79c157649ac670247c4b3ba010aa610b4c931018319c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-ad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731ea733ebcc6f4698fee51b9d008288050556c93676dcd327eeb7a46ecfcac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72eb915230558258e1e43ff3fe8772e19e47b0c7ec082650447781f5a55d3c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170566 Malicious code in wulan-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e121b35a787253d269f5ceffaa5dc7482bbf4a3e685b5efe960c8e60fae67f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169680 Malicious code in ucok-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd16ca115c9597e27267d50f94ec682614a55ac065e9dcd0dc09bf98ebe3f563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165221 Malicious code in ronaldowati-cir17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f308267d51488d13b5f3e7f382feb43b233c899104ec4353d9b5116f1657532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150051 Malicious code in @mipta1/hykk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ed3ac4bd14da4cecfc7fe475d2ca30d411bfaea68c01f95dfdcee1b4ac81f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165772 Malicious code in sau-naki-iyuulaap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f93e5c3644cf00f5e9cd1960674987f56d0807eb41ee04be71e29c5dfc150a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157327 Malicious code in kamasada-nusata-bunjsadab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49a7dce45db82401786f93a934ed9125a1746374353ac9fabf84ea6fd054d23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-native-quito-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60bb1878c8530d69271cfa996a528baa124dbd611971c65213032ae04e9f6c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-ceres-element-ui-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979a077177e77d8dd179974db351f01ac49b8fccde97b9a54405b9175dd8ac2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...