MAL-2025-164120 Malicious code in pilka-kali-nuivi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc80ed31fad814a15b1a5183732b55fec0dd8d60b91894797252267fba826036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163268 Malicious code in nokire-nanali17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708a9a12121ca89967c9f6aeb9dae61af3c0520b3b7d4b316b8139216d9eefe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150686 Malicious code in @miptaa02/gfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25934ae8ebb54ce00e0222112852216c28eeb822b54dc35f0980dd430cd8063e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avi-aba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42155b8b157ac768bcb3c63b967f1fa93aa1761b9ae6f70f2b48cc0236b4e031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-miptahut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51944508bf82014e709dcf903eabc41d7a2be10815e55bc2fee0e8d470f72f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165252 Malicious code in ruji-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752850969210c11566023723de5d2ebe929dcbe9e71558a714e7ccdd2161e9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167407 Malicious code in teagood-nalikami132 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b395f386284b958abf3e6b88fb1a532adf7765638ca119718aaf333eef95a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156205 Malicious code in ilal-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15254705bdfd7aa3a9edf63cd8a51c2b254033e8867a31d418cd87092204a8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156126 Malicious code in ilal-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f2a1fc837a15af104252df95a0c3eaa46157e04ef709dfffcb9a5930444791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167866 Malicious code in teagood-yakuna105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87616c537b7c71a30dd6fc5765707ddbc9d142bc7c8136efdd249e3f08ec4efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161685 Malicious code in nabuf-otomabin-nuyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff2fc98fd78d74f9dd38a751333029251dfbe280c7c51a22637e05d07c7279f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152335 Malicious code in alita-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c26702fb24f0a2b66317111037d1b367d369fbb803b8382eafa74be14472566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150034 Malicious code in @mipta1/gkjlk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852babbaf62ac6c93f0f9329b63d570092a815eecc8ca780e9a2e8f03fe270da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/xdz2rdtj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483eba19755acc71733826a3cc7f3120553f4ac7fd6d564fb830971fa4edcba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170340 Malicious code in verify-aya-aul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b04a85e4e1d88d16f0cb54594b39854a0cc1780616e7d2ee8ffa37e99b25ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165215 Malicious code in ronaldowati-cir11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152a7d16734b9a5f32dd32620e900f461ef6aad96acc6ff36b247e30ab45bb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623851317e0ad62c4baa83e63fd2bba810f3ea7f721b2351931fee8df8532a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161532 Malicious code in nabuf-otmbian-ifafonabof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247bb894f96b8f8ae62d0d41f5a0d2b0e46d5efa16cbb9d9f4d0a304e1ad6774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e831420a3c4d6281e04a7c3898da3f0c7dd08e3740a732a53c9fbe7e7feab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161826 Malicious code in namasae-naiuapa-mapoti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492e1370bf920414ef97cb7e63cb6f4330a933d101f87e42fbca04b9e8f5e070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...