MAL-2025-153442 Malicious code in avminh-afogoafi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a9039e4c1983619f4861d594b997be17986e8f56531ae0f45f175354b29d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164208 Malicious code in pilka-luniu-kanul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8de5ff33d58d66da4b31de456fb06e7a772ee57744d0b63cce29f04093a197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fini-savion-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa9723f4ea1a4acd46f88cd3f7bdad51a3bb81919da93440921d0d6cd0cc906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152796 Malicious code in arif-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ae3d30e498943380f214e38ce90ce0abba70d986095fa4817bf4045a153c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169087 Malicious code in tehnah-codifad-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95921c0ad2f30d62e38e0f59b89844e722b88631e1514e23d3958fd8953dc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4c814b736c5f28b1111ed7d37474454ca5d54c7d2f1c971c613b64b97b19b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153582 Malicious code in avomainah-frauu-ofafq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3f4c27acf462e250c70a1df48a9bdb72e65ec4338b54c4f2f9bbf0f22210c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158282 Malicious code in lookingan-konami23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5a257bc1ae0ae858141708c6416b60e3c7ff7168a38a0ee6bc0d04e64e2d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomian-nosusuadfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9120f5c05398ef098efe01a1a249e6bc16954c2f54e2381b3e0a992215284e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164549 Malicious code in prayoga-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd0d2902c8c3fe7944887f731b7012d234cced5fa4a2b7685d747e1269e1a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e2e6f969ad1b968f6de30d4235077e2ecd23c20904ea1dc6124979550dda49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c4347b4bfb5e0104b78737d6456847a6d87cd01839b0024ea89198d6e5de45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nusta-buajiibdaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca07fe854066d8d0b4dad4468069f634c25bb08ccab8916d58b55b2f7832377e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165425 Malicious code in sabua-muyafig-budafauffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac05bd45a7c09124b73dd24610f99e6b0f2a7b1cc05d662134500c8d6e0eb1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157541 Malicious code in kentung-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c0eb29571612b803f90606117cc73b174bce8b74b8a32daa21b66fb3cdf1c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasaaya-nur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bda948687f4740cb1b0f8fa097dfd9c2934b3230bba6a4c26558fd4444127c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e465a393ac5b96333514d0e32492f6bf16bddf77c9230e15f393d0855f95d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150370 Malicious code in @mipta19/genser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab46f4142c2bdffdb07c56bafe93adc77cfbce4b74247fa6b488f6468380b1f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152724 Malicious code in arif-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0d082656ff324735eb2f3ead087c5bb2cf6863566d8f4f7b5787c9c16e817c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955eb7358dfc6ddee348aaac1f6e28f40c5fe85080a9b4e4972c39f995d41697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...