MAL-2025-154251 Malicious code in demaf-byturaa-nafmig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f537437edda574028c59938a3a3774e3df71ac604b2864a091f07805d9a1d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161150 Malicious code in mutiafaft-msiuyu-masdta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6458a4546d6e162aaf2352491817276d46a55ae9b4d4fe9afa3e70e50f6791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164482 Malicious code in polymera-manuyat-pedadaat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1490269c6db451bb05bed8428969e5a8a7b4ee1beb00a014e55f78ec50b45a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fini-savion-transfor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee05a9ad01869ba3cc76576534440ce6938be87773769fd946b048d4ba099551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sfga-trud-mutiar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019fd420e4607db13a6bf8574c6716bfc36d51ee4c2c330a23109cda25e0437f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023d00e36cafecdc104221aeb90009b8dc8334137442cad8c189b93873621f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gobali-jagmruan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a6d5596a35531028ebacac042380edfe89a6cbc017d4b3dda7b1be39f4805a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde909ff96d2f5afc6572d147da91e7b050d351e148db7e9d90b7080635942e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163663 Malicious code in nudalea-fofiari-agomoido (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5da5926e074ef3f802db1bd21f6f1827399b17edf52a7aba338699aa2adbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165556 Malicious code in sabuvaua-nalui-lunbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487f826df0c57c77e75e19cb49cad1b189a2611ce8916f578e8bb40e32064ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165249 Malicious code in ruji-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b2a143ecc2b027113c1a90e363f3236bc6448209ae08dde7ac4a953fb7b2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157419 Malicious code in kapafovgiagapfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd83b2747e9984ff2249dfdf8fdc5fe699ae0a9d89889f1a39489b21e92a402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152588 Malicious code in anais-pafoa-asiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ff07bb045417a3bce3187acc08944a6db8923fb90adfe30f481267b3c16301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163163 Malicious code in nokire-nana12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69c19211fcdbdedf7f50fc0d02478ee4835c074f361c9fbd5586f06a9759589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155846 Malicious code in iba-otanai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eebf1a93f684e4cc5c0cc9152898129827c391ce65685b05fca7fb79b8e01cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159038 Malicious code in mahnud-magu-naibkaufam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd3ee51cfe95815eb79bf7e5644c557a42cf588096a7533f35643dec588f306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170323 Malicious code in verify-aya-al (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe49e854047d1f9cc460fc59b51e74504c4704693d86d0cc424ac0abcc88f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-phenomic-schema-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5d533291b2ed88674d84856e3b9d0ddf9b1420895789b87beb95ea87124916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-sirius-centaurus-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57249715a10addadb8754d180f52226096d2990307d50b42bc2fdde20b9efed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-mira-test-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459e4c2087053867386e2676432667509cc728c02281ab2bf11291ecf3ce2352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...