MAL-2025-164435 Malicious code in polymedr-minus-buipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8093417e3c6e7c6b39ffe13e2d6b68cc437f3e3f7dd62c77b4848368ae95afe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152804 Malicious code in arif-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f71f1aac0ea150ef71bb8b209b8a4ed10264660615503f14a93481b35593302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169715 Malicious code in uinsnu-lkumi-kunalab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38c791a7b243f63aa95d47da08f2277a68abf86530cfb6932f43e1ed7eda6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162291 Malicious code in nokire-akaza75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33081e428b5171d224c4ec0b13b6e222037390e3df334c35ec36d3e0741a6338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161346 Malicious code in nabuf-oguof-dasgusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaa679f1aa22c0448bed16cf677cce268f1ec695e2eb545a24e290febee9085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156067 Malicious code in icha-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fbd15fce2313e73a82dadc511c7da75de627741b5bfb7c20ceca872ca05497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152969 Malicious code in astia-alaki-malosiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ac64439a50d8440da730233bb70368768377953dfdaa03f0aff695f5515f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150474 Malicious code in @miptaa02/aassai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c2c4eb93823d91682e1c72e7362f4847cbb079dec34a977f827ea19c1ae394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157077 Malicious code in jimmy-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9895b7fb3302d754c54cfb6f7d33b3f6153ff9190bd6a6fb49cbf63d74085862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151230 Malicious code in abiba-alubai-ayata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6603d5df7c23acc17b15e2b807e5a0aa6a334e34d496e5bc16b5093112d73a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166039 Malicious code in slamet-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c472a364f8708d96f79fbd942c5cffa3b16d438c83d20f0af3f6cd1bdcf7d91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150686 Malicious code in @miptaa02/gfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25934ae8ebb54ce00e0222112852216c28eeb822b54dc35f0980dd430cd8063e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158122 Malicious code in lina-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79ba5eadfb5f67a225ce166df30d855e3cfdab1edc8f08139a6573004285c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunde-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8070c6b8314aacefa699b02e78ba068a39610aebc957af734fa5b78991cca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ee720c69fa2056196ea48943e5b0317113faea88a91aa80093430b90d5197c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tfla-magolani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b533f2aed5ab79d9f45dc23b73606fe290cf0e273662c13aa7a7bc594087ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahafeg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e820eb6ffa746e412386fd306315b6e23362fb1d2705f4de0eb0e4b31d4015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilkianula-lukuzili-ilazou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 631c560b08e4baa1cefdc520593adf0ee0b1e72d34011128033785b744100ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-moile-aromagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bdf50924a052a560ae0801c9e21040393348d81a05ad11031b234fc9a5556c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mand-nofoayiaff-mutu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19184eac8d43d4cad4b3c5ee7042488017bf38b3f7b08ae4ab96e0d87914ae91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...