MAL-2025-169308 Malicious code in trevora-gissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a7072ff1fdada9dd1efaa7c6b45b854dfdc4779caae95837323fa3f95bb47f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169565 Malicious code in uaragifa-maranfu-safi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5adba7508f993db5abf8e31dfb7de4b19e01d02217d45b05b0b7393f9561fc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df5a7d305121e702e8ab75db490e2f7ac5a95acd0e244af7ece2c9f1a5f5e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154742 Malicious code in dioalgo-klp-akaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243e6cbf748d4e86bf3dba842d43cdd29d7abe3ac338dfaf4c0bd93bc4a780a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159648 Malicious code in manda-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c9487a9f19ce61cbd98be35d2598d9f7f25834ba33c5a7d7dde4a9e1126f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160777 Malicious code in muda-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d3f760ffb54d1ce1ea4605b522422a99e42b35dce0677fd5765ea5e9948024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151320 Malicious code in abih-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e1f456dd357bb7cdd8bfc4a8f232dba1db354d96faed76154574f1739e18a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162158 Malicious code in nokire-abimanyu44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9106b45d191e6cebcd10393aecc7737bbbb150d25ec0e95dc6eee3e4246cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152505 Malicious code in alvira-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aceb5f5ec14c3b49d44af98a42f176569056e229606f8068e1329e21e6a4549c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150352 Malicious code in @mipta19/asisdssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1783219614069c28f8c72a17683c2ba5b1ecb9b6f6c52689a00dc0574aca7b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157592 Malicious code in keyla-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777b49e49a8c0a24d1527706dea286eed555246c3414bff5bdce998f9bfc4c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-idaduasdssuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03a129f4c877fc42bd61bcaa6adb7a58eb730e97b75be86973d02fe9d70146b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iba-otan-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead9f1319fd16c6c0b76d51a08ac52ea383a841f7237c6b513dbd6e0cd40fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ef325c6d4ccdd21dfad94d9f945b9296eb0c1e8c70ece6c531b351fc2453f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analsia-akifalui-asulaniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c238013f9ce803d0c7ca2b14b4286ff319183daf688bef73a2098f06b8715ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-umo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d967898c499a56420cef668d5d4ea3d311659b6ccc0b3fe2ae3b20ff64f38ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuffak-angabofi-gunal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90cb01f5c83ec4228c06d734f3071c0962a257f24e2fe3018dff13e80fd5516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibuok-inuinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c60e0beffe07af0f67f0b49804566d0d2780fb5abda0a95df69960f119285eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namae-nadugsua-mitoskia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3e86cf1d65093c25e075c0e6457c5889ee7b61aeb9ad8d7130be8ff2b1aafd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7e0b1aa788464bd5a9bc55a0b06155270ca6b26c6d20e4b6c2a41c607faf3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...