MAL-2025-165553 Malicious code in sabuva-nalui-lunbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27356987c9c939133828f23c0877c5fbfe74045666ade97718a2afc3ff7cbaa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159951 Malicious code in manttu-nuyati-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5993d5b022fd93f21983557c73e48ae0ecce98091d5e53edeef929c98c311a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151072 Malicious code in abang-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd4378f1d3324df9a345f137c3976c7178222a0650a3178d86fe44b776961ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157977 Malicious code in lala-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b48cc08029b39ce72db3fe58759e2e9fa0f77b4e53af799ff1127742c4a3d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163858 Malicious code in nuilav-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c32d629d1b2198db628578e4495f44fd9cb1f7d49c7e5a9f1ce481335d0cf274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153985 Malicious code in butarsui-mutfru-mutyofaoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a78ee7f2f21b0fa4ea0697af2b57e3712043d4a7ce771a4c2ea9cb0368c5e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153926 Malicious code in bufani-muyu-faug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfadce912652be3731b6ea08eaabadaf5517c4175893d9aa947564127f929d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151963 Malicious code in aibopuna-mobile-araonbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e175a7d597475d4c55242384ea674cb2f6fab362a5ac34d193b5c4ace5e7dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152566 Malicious code in alvito-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bfd6e64b483aa47133e48cb9e32d95b36b860df07683bd15613b5b5f2cee4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160410 Malicious code in miftaiky-long-condition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023daa735cc13780cb27de27508c9a71bd3f899fb75b670c36c5c49f5a0806cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160053 Malicious code in manurung-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4d63fce68959281d7e4dd8cb7ff1e4c579506adf4afc68d27bc1edce6cee5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151700 Malicious code in aciaiaggu-idat-gfada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d74d306962df7e169c02ec92a35be8f6cb9dff3e92350c248ae4b3de0c51a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155745 Malicious code in hariyono-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4643810e5af272dea3c220dc8a013545cade3e5e5c09f77800da5fa1236c66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167580 Malicious code in teagood-nalikoli27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b47d836901f473c0d5eec94fcf6c27a1fce8fce7260862118617fad394b6238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152063 Malicious code in aji-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c5db969213a8c84c67e3baa0096f578d79c1518fbaef0bc8a0b87d45d9ae56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169529 Malicious code in uaragifa-at-usafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724e6ba8fda659b7391d4e6c87bdff0aac6854dec8a0174a3955e5e817047413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-amber-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063159677dd77a60ed3c35f0cbe6cf08a1b4c1187df42866d6a13b33c6299862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140784 Malicious code in classical-blush-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4788edf05fd7a84c1d50968e29cb519dd07ef3c4707662ff8b3ca19a6d3ee6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-algol-adonis-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3843506cf065364f776d0586ca97866bfb170acea717abb5c1f73d6f78f467f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-materialize-sqlite-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ecdc85046977f03c2dffd2a11621e0afb79893017306e4ee419e68c785d6ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...