MAL-2025-155591 Malicious code in hafiz-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7871a08a6a1df505fb98299c714036569ce19bde8b3a0d9db735928cd405621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159793 Malicious code in mansila-tfla-magazifidgboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73b112d4d52ff738a1784bbb16617f1c0e7b2f4e817720c2371537140062a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164401 Malicious code in polymedarnan-nufatima-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e50c3bd099003dabde9278e1302fac7725633e3e6556f791829a5cf72d9c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151997 Malicious code in air-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e26f9e9132fb1a56dc2fb99e55058b23f2de37db8ccc64c6ecfa998ebc66fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151715 Malicious code in aciydua-idusust-daru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05f7fc93e46140ac77c1ce9e76a5739000de902f07cdaf10bdbc55aef5a72dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156863 Malicious code in iqbal-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcee6c3b9eb915ae6e5c50c35f06284d047f138b7043a92990a8a3558329fec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166429 Malicious code in sunderlan-ud-vanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5dfcab22a959410c0579677e9ff21e82b0a756dd5e8386557b2f2950e1c755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167686 Malicious code in teagood-namakai32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc76f63bca213d368b04eaa2323adcfbdd9e77a4325ca8eddca10c5f56d5829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164070 Malicious code in parwo-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9007a12da2d0ab2f5a604c6eede1ddc125a954c03c51a895e10ce2f3b8832f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahfe-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 036dc4163679e2b6768f60c2c33efee47d38fd6596900cbe6fba95a1aeb46498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanun-ota-umuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9723f9332f9a685edf9ca049fc8881a1f91b57bfa6fe0d58534109b46ad6878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d213c7e123524e5920b2377b0425c71246ae1bae72fb628013e1dccb978ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaadgg-musni-mifuysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f111b0730d5fcd97f6c2e953fc512a82837ec792c7649970b2ccf2d46b868a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163623 Malicious code in nokire-zenitsu35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd3ebd6db86383d7b2d9389c51b7423830c4e19d08e3692374287625cab09be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161311 Malicious code in nabuf-ogaf-doio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cad04688f1d81d2bad42f96bb62f02f11193af568e288619275488d0a4743f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169986 Malicious code in uinsu-lotaihmi-kaanaimlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79f0697721e90f90c969493db08b3bc12fe3c81808c6d52dd74f03c5b5cc1724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154751 Malicious code in dioalgo-klp-aksaubli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6257d4c081b63e152267ad88d1c0b84e7572ad9a42f854080306dbbddc5b1857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150907 Malicious code in @miptaa02/reaalsazy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fdb52cbcd9bae282da7fb365a8c5cd91c2e803394b4f5d069072ee90a39e35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164895 Malicious code in rita-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0509daf36783b4947b97c54dca5e8c957776371502e21b8b3c866f8f2bf41f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163807 Malicious code in nudela-ofgaf-gajfohahagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685e9926e75799e65d677ac1b65619bb374298b1008d6ea59472a7fe158b171a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...