MAL-2025-154361 Malicious code in diago-kamli-luaqak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526cc05379949e9c36de72fb3b3d0ebac8c02dffd728f2900ad791fc579f12c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168587 Malicious code in tealove-okta11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e5214265660d366821ea4db04208ff09f1216e41daaafa11e7a74ec0b9d69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166594 Malicious code in syahlan-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea58671f819ca75cbc500a288b609e18fe1576f92b03047e03eb686cdc42e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153401 Malicious code in avminh-afgais-fafdosafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52162f730f34745434ac8d71da8e47dd364cc2edb03ab63afed62eba64a0565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158024 Malicious code in layla-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745ca5b405dd3235a248750c3d0a5fcd0552a4aeec0e82e6f20c1804a3b34214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161008 Malicious code in musasiak-butsd-teru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19351c2bdc0bcf7709e31da5a408ff7fe81dc0ad893981308465c402e55d6c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nangai-ignu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4267ba4299f6dffeb7f4d9225cd3b5ab933bfd54b2cc9eef669c86448c1a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c26702fb24f0a2b66317111037d1b367d369fbb803b8382eafa74be14472566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-mau-namasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89fc41f84d18c51ee0cdffc9b9d9a935908168198935ea7aa03f1b84d44c92b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-aibia-babu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05da10dd4983389274f7d071f9b5834f8567e68ea76af4bcc8b1e529a298af82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifa-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3b32114a41e4c584fac7cd1d40479433e7444d9c1f4ebbb441f1c9ebf0ad96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e6b5a6946e656af345999f9a66b267e2d816c33cff20cbc9c5f108ae0ce78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/aseszwassar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f595f0d22d06033991feea2ce2199b253cc1e38afe9e53bce9f5c6e2b5029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2d3f0079a6e1686a41dbbee009ca673482ae82c2dfa3ebad2ae3bcec1ff5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a80c8c9c7bd277a68203abae05bccbab756bbc07ed1a127fad94392c0c290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66438272c851678ce1d946725b6bee6212b2450b779ef615ae7fc2c4d362777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-ala-malikfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c40c94b3b7d49037f3e55eae4bf917a9d08bf63f4aedcf988f160218a83a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2d3bb78ce37f26b01b91ee9f5555d50d682908c54eea84f46dc88edf5b25d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-kore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2905d7946caa812ca9ebad256eb59fbb1c13926e123185b3962fa9b6c798949e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b072dfc5c62bd12611390e8b503ba2c8717fec798c1f7540a021b5c028ba16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...