MAL-2025-163620 Malicious code in nokire-zenitsu32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a9a7fe47fe1520754a5eca1a623ab97e6b8b1713d952884ceed03fb1be724b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155605 Malicious code in hafiz-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4f7f89517f8a744bbb82594d554d248e9580227f49b2fa02003e73766ac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igono-jinamugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33df74378ba2ae1584b9a097433c7a33e3ae79ab05294d8acd0d30ef2986b72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyada-bua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5ae5497ce9872364d7e9716e1fee07c5c572c02703e7685fcfe6f7cc91a9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151643 Malicious code in abyia-nik-luyai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a969ef669c340c0de9be45a7bafa39c0a14fc93a72937ef952b9b92f7860ba8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170098 Malicious code in upa-lubalauvalio-ilualsgsdfsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbaceda6520832936bdd3d76e731b8552c2f0f9b9fe5b9db7a02e96af2e4f599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156188 Malicious code in ilal-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954f18241f55aadfc0996f29414362799c7a0ada0f92eea57e3130a29c192d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156147 Malicious code in ilal-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6c7170a5d9d2dc4ccf69ab9d615a2144323e5343ec0700aea8e620cce21b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170582 Malicious code in yuda-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bfe97055b26c235e7f2e691214f8d6f1de2997df1cbbe1588fcb11188d5b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156808 Malicious code in iomodra-fuoa-jafuliafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fef930aea972f4e6082d151f878af67e7699d58958de4e0cce2ae6609a51935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164048 Malicious code in parwo-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5208fdb432d1b22b56aa13704ed91f058ddc0770ea0c7112e825e11f5555259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169042 Malicious code in tehah-nutfday-kob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b9dc09ea0e54f0527934ef65d1b5d2b8aa1634ca52948983a365dfb2ceb8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159683 Malicious code in mans-manapa-nuty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ee231d370da554ed80f18283586dca6b812697f98bf49ae894707a6fdc9031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153461 Malicious code in avo-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ffe01a46ce630d21ac50836939e547da4976ac9f434fea35ca99b2e92b9b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158918 Malicious code in m-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44318aad1b4d502050f07cbde37aa36b4d6581b5342f6540ca56988189c57c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mfgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df28af214102cf829f1bab94504cb20be5e5093371a2b85eafb1cd8dbbd4f4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-teadf-nutradua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a39becfd50a2571b06324c1f5f8c7e1a43b40d9bd7530f5e3b34228b75c62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159433 Malicious code in manadsi-sfadia-madav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c448598c1977ac9bf4d492d662848345d970476a0dd5a219cc820963a31949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9abb863fdeaaf03ccb27d319aacebfd6d49e113bd9bb836c7e825ed8ef5d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kaipsbuko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb0f89bd124189382d8efdb9dc1f0f28edcf115dfc32b4bacf3bead0d32aed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...