MAL-2025-153864 Malicious code in bitha-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0177595889862c5c177a67a4ff473414e3fb403b86ccbf30404f8a903da6125c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151195 Malicious code in aben-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bbad6674c7aef241ec0a145f0089dddc778aaf1bc1211e17bc06287436f536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154719 Malicious code in dioalgo-kilp-akiualabnnuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7539f98dedd8d893d5474a08db19e0d9cedde3933f0e722b21192da88006ed1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155869 Malicious code in ibanuni-ota-umumauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e34f24762987c218dc113289e4118b917d29d68021bf35eab567ec997a83a012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156271 Malicious code in ilop-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cedefbd86e9e3fc160743282ad792c645b3c5551453755fe03a0bbe74c992e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164874 Malicious code in rinto-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051df76847c08bf2ef35615d57f94a13fe1474baa4c281e664c359917253c0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aik-al (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3e695a597947b7c63a9b37f329c9e13a815c61b3d71c255b6cae16209e7d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ebaf78527ba87c8b394785d5a9e14574ea3400126e00745f91c2b6da38e076c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef35d39a26468cc8fc51788a95799ab5b094d9b2979fa05e5365628583f4352a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-bafiafuima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f271657c9639df25cbca2187d775d56178fa74a49b8786bd0f15cddb14d442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubalauvalio-ilualu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb5cbfc5621e243326564fa02860ed61938b0fdb5ae1d22f1f6eade2cfd87f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6d9b54f1d692b2ba37fa5575a5a3343495c9fc8de51b9827f73b8a2d67a65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0effad2f987d2dd979190eb51ac8626c1334f89cab347a0a2e6774d10313bdb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9a7d18f046be62f54398aa4e29c6faa2653c3322d03eeb09b8809e0c47fe88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cff505d2ff7ced48c3e94e6a6a667b2bdfe7988973649b60f65b0d02c60a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afisgagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb0bb6e17f7dca1eaa5676137aba2546c63433d63f3fdd262021efd4d2850b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/icdg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc3e13751a386602f5a18e71224e6c8e6be929bdcbfd106596136aa1620aeed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-nutay-tatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70eef2c4ae797950672c0b8ac90a6ea07ffcab5027135e457358708b59fe1504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuyata-bustad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876fb15e4f7eb4d647fc7b57ec0106a18de05fde16c0b2768cb5466af88d2424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otginaaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e27f3926b41bc6e81e59bc4c1b1054f1b2dfe50e60dd4a8cdc881602d9b741b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...