MAL-2025-152465 Malicious code in alvira-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2af79b3a7520f4a4dbaea0f53cdf301781e4ed5b9405700a6f53fc3820d0812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150683 Malicious code in @miptaa02/gaxzxody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf616ad04cc24ecab03d08edfcedf9c4625148f8dbb62325e583847bf1040e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155293 Malicious code in gifa-ota-uoffo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fad71722f7a32340f9a80c35600a43c3f0b4bfae35bdd4c078c42020eca225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151692 Malicious code in aciaiaggu-idat-doa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849e03658b49e80038659ab32879cc230db9f8f6e83573ab7614772db652ec73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150561 Malicious code in @miptaa02/defhfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fb16c17110305edeeb4d8f4db8c516969d96092c2918a7b7d898801982f06b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152498 Malicious code in alvira-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb26ee707f69d6be5030c672af170204a2579987f432e03fbb65a8f4c62d352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164170 Malicious code in pilka-lniu-kanjika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d304c4c48ce261160a7c5810bbc3accee2ff08b68bd39a0e97932d33773a757c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161136 Malicious code in mutdaufs-musiop-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623c155c37006b0b95b1fc0b6d87d9599d4461f0f28bc214e060278814957173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164515 Malicious code in prayoga-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085e5dd25901c1c3a49bd22adaa2420e30afae5386a1f08f81b3cb95392b7714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164905 Malicious code in rita-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995a4fb627d4f8d0d281a75da404836f9af4b45c3ea06e8dafefbc6404bf9b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165779 Malicious code in sau-naki-upsidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9be09352ba5ee088006c9e1c5629ebb211848cd8cd80ebb2e432348db81877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168829 Malicious code in technical-ain-itubail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3467491c7f09e4fa1e4fdb60a438320aa351e957348285632b9fdf7e2620930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151321 Malicious code in abih-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb2b5ea41ca672feeb2c29fa69c27e9ec09052fcaa01504ee20411aa25c8e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161917 Malicious code in nasrul-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68112ef64e34071b67fadae6ebd8c26eb0efc500a8071ea555091ff8d530989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165366 Malicious code in sabua-muhufafyu-tadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1b6ac4cb25f3fb0c4088f0d922d997966bfa5d040ed9057b4087e7fbb84d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158712 Malicious code in lookingan-namakita95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dadd71abda1a4539f61164399e2a69b5ba885e654a45e58332bc509aab8fec80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf835cfe210b9c2fc00c17941b1091207786837a751fe4593f8974ba280df35f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fragis-ogudfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d264e863f1b881eb21a13237c30ed277585278ddc7f8652bed3edd6047d02c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minadus-buie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f866204b08e49786bab69eeaf349b28664138d1d988a5d240581ea41ff715f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-naiururl-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b16925fdf68f15b7a5d25631eaba78a88cb441f7680d83533491781b0404683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...