MAL-2025-185315 Malicious code in tunis-kt-gahuvfaduf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95cf3bafbd345c109b58f8cb2289a60ff31d69383df116e6b5747f356d147a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182495 Malicious code in imodiov-omfi-cafacea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede717f74c76a501b4027ec85b4fb446fceae1148afe91a03bd6a61e616e77ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179096 Malicious code in thambi-uyte-berts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1ce9c7512deb0c5733060ed3887391ec33ebebdfa0ae11902dfaffac1dab34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176356 Malicious code in nokire-kushina34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9601ac63060f271a5b8ea5c8f8e56ad9642aa81fcacb4d7abd9e9ed96524d34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172330 Malicious code in auis-lepod-nutsddayiaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000a2447faf6ee6776a81c985c7534e7b43e7524e63327931ff2128c1afb813d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-luki-nasunnabaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf1c6bb742ca0295428f98c54076f64d4d45ef45472257ae701dc8babcf2155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/g1enser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8e70ec97cdd87901f00bbd520bbc4ddb7952061a7ef4d1bb625992148e443d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fjgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b23cb3ecaa5afbbce6cf47869bebaba495a8591cf01b6c51f24e1ec7348edc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152836 Malicious code in aril-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d2d5a73a8171def99f0f9c56ac08dac121616aae0d395c27eba8ab0926c527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162005 Malicious code in nasution-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b71a3ddaa5741c259ae312efc7834349ffba42abc5c177376d071822855c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162624 Malicious code in nokire-kilua36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d9095c4987f372b71205c319fa487a52d6c6a1dbf82e72ea4c340d212d98fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166922 Malicious code in teagood-lokika56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b7e1528cf7b771c91340bb92c5ed473d07770d1ebfa3e6b73a086b73f64104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143708 Malicious code in io-version-spinner-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcca631af9bd1225bc2295e4972bb17157ec73006cf5109fdfcbc42aad6da17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138687 Malicious code in empirical-amaranth-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector febc4a7bc10d0559433e5fd29c4590005a340266a4e1fc611c8b9d8488b0fe24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itchy_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ed4f49dc48ef167cb7899bd61587628122c3dfde9e340600c8001476089d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138508 Malicious code in zaki-tumis82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f346cffb61355cc9cf98bf0363c20175d0d8d123ce395dc43f47eef54bc289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135867 Malicious code in nurul-kemplang4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5720acdecf3d5722e827b1284fc5a5a82116b4ee7d1366c3e0036783001ae394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-ketan39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdeff6e55608b99a93385604d91944cca4877904bb7d78eaf2a65c79399bbb0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514e6d4a29e5dffece18f2253291478f7e3926a2cf9aca8f038299cda1a0c0f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131657 Malicious code in yuni-lontong44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55523d3497c0d94980a0fd2df539307085813790d269fc2b352d8cbcc2d3a6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...