MAL-2025-169970 Malicious code in uinsu-lot-bisamisaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fddb060a496f603f48a03e20eac3094d18443415c3c62ea1e004811282086dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169489 Malicious code in uaragia-mudiffa-sayuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6727ab492d0f9f20d71db8781da31206a298bec3b96ed0c2e692afb00d127ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149987 Malicious code in @mipta1/dsadfmna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b25d7af2cd01ac93ac1d0efcda98f398510fcd7d51aea070ea49db9a8a6f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161183 Malicious code in mutus-manis-nauatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf17e8a7fed622c3ab29a7640bddfa31e269ff308824660981df1d383b28535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163981 Malicious code in parwo-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d286ec9c411b242ebf3370832fb5047636877460282e840f70b3198a8f9622f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165776 Malicious code in sau-naki-ups (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37de7b4aab5f708d708d9aac7f78683f5b029e31302c090cce78bedb1bf196bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152095 Malicious code in aji-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa14c570eb67447092ec8af1eecf13a0b5327f3f1060ddaa59872620bb9932c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166766 Malicious code in teaadggs-musni-mifuysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbe402bce17372dfacec9b0ead3af170423567209bc8a84eab1b7bf045c26c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168860 Malicious code in technical-albio-tolnan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5def351dd8736c67d0170896a969e4eb8630c26c712c9573e91107e49377ce28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154486 Malicious code in diago-kulipo-luookafaumauahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ceca8a498ae3bf3da54bd028d732e5a9639f4edf536d4c73ccf961bec9f1c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152178 Malicious code in akanabi-aibia-babu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05da10dd4983389274f7d071f9b5834f8567e68ea76af4bcc8b1e529a298af82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fjgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b23cb3ecaa5afbbce6cf47869bebaba495a8591cf01b6c51f24e1ec7348edc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155619 Malicious code in hafiz-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724d28a0238fe7931e5837988ee95993bedcea50c7223bde234a9def0ccef22f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162276 Malicious code in nokire-akaza61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa5153cf5a5d83484d3ebab2fc98821a00977c7dc4f80fb6207a8c6b6052cc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150822 Malicious code in @miptaa02/mdsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba18e9b77e30f3f7e914cb7fc532168c9d8fa8fb55f3b03d4d0acba218d2a6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169125 Malicious code in tobrut-hentai-anim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5cf8519facfc8889a8d35ce26b279bb976dbd9f02fba4c49032e543f6e475b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157098 Malicious code in jimmy-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098853bfa78355dd5db68c2c7ec54754d3db3d53c54a5bf514daf5989790a165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in busy-chocolate-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fddb4341930456fcf26d397acec623f247a6d26b093fae7f227c7c4de79da790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148595 Malicious code in testcafe-husky-betelgeuse-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957ecffbde3904975384617f7e5b76e87599dff9c6d45add620b7b057910f3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145522 Malicious code in node-config-upgrade-library-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b7436d1c19bd4ada5702cde9f3b4b860ec5e5c962dc062ad80ccd76e1a57e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...