MAL-2025-178662 Malicious code in sgoodain-sanu-nubaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8b2ef8ec313eb09733a442623c9202cdce11791258fe2c26e444939c1cfbf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farvadvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d9eec3c8383412bad75c82dfea73ac69790d96b0ea5bc2a6438d1b569950e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170759 Malicious code in ajmalzaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0debfae03430364faaf120bcb9365edd5da76dca74dc1157df4c01ff82ed9ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ahnafmunir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed4f0843949b32f28f8d6b7836fe1bdb89b354f62bf5626b331acf32501f83c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f16e035f04a9cdd4a0d5ca934a95813d2274c502867c90bb258bb5086392137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-adst-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4243bfd356451ca205a5d3c991e159e2f091c58f66e18795b643347275ac927f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-tuad-usidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c32b634da703612ffb5c736af2768fa920f7f2aa88f81e4834cab6bfddccc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutia-vesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a09064cef1e8d60b1c50b64e00568178ebdb63ef9a089f109c2f6e1de62d7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163310 Malicious code in nokire-rara23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4667814a77285b29497b15eb08fa181450756a0c8fcc4a8c29f5440549bdcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151546 Malicious code in abu-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa9ae6cb3e6acd0e47432bdc60b0323ba776d9381122108e3a7153919619010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157493 Malicious code in kentung-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f6f4ef8c421992552716f2293adddc9291bce9998aeadfbb9091a9bee34a949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167930 Malicious code in teagood-yakuna69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd73bce045003126029cafc0f5d03e60b96ead8be9518c1fc5baec873b7d4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150701 Malicious code in @miptaa02/gzaedy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0da0d9932a4a47f608d8908a69dcaa6a7823d5868c4217e8f607c36caa0eccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158049 Malicious code in layla-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4e405d3f9a6d2b3581101bec0a83bf3d61b446cb1d3066c375ed59322583b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165970 Malicious code in siregar-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddce0b72d80459ca9fd7933200cb18a12c35e5dd7bacd9c4940c6d0f627d3a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159671 Malicious code in mans-manapa-nud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4ee85b750fa0cf2da26914c6b4271d6f410fc1a7c458c1a01cdfdb9c73feaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153645 Malicious code in azhar-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f625749e8aeafa5c73195d3b8354d8e9ddb6d14e229c506f2b94aedb903356a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158776 Malicious code in lookingan-namala62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3731eedd2a408433b3bb566bdd7fd10d837df875cf25636769877aa58b16d564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uiu-vilkukmbimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345a2aa62978c3f4f0f5e80c6e55f5d25d69028e8917917e856e78f1e9ad7334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-nautyt-nubl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0249de3f52e800fb17973d080833dae87e155ca15fe87dff672d94d3a840be22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...