MAL-2025-155562 Malicious code in gurs-uyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4ca2a2103cb896e9bf9aa5b5395e6b67c237b6e167679a1b2f6e100b40034f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167104 Malicious code in teagood-manaki39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8574fb6e59f4368ac8cb07e9ef08c9753e8301d6467934f10e1a4ffd34860e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151063 Malicious code in abang-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1771a00d8395cea802460df4c23754fbf7a260673133f3d950d8733e8f5f8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150673 Malicious code in @miptaa02/fsis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4aff69e1c56951a72fe5de2d3bc673d79b799eab582f6aab2a5fe3342d0ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157916 Malicious code in kuroichi12-discussion-wide (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0990336dfb79ea0c8c6dc3c46097edb0f01b281bd807cae4c7c770f5029a3914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151261 Malicious code in abiba-avbai-abunai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9858004696b672b58ef3fb68363de9839df80f56baf884c3a2e6b8970d214b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162914 Malicious code in nokire-loklok59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d49de77cc614411ed583658a5bf086d43bd307be9e6596090062716ac612b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165731 Malicious code in samehadaku-qszess-sur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7d09b4cf1dc60b388670c6e71f9b6bffaa73d62039f6efaac5256bcdb072d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168730 Malicious code in tealove-reborn7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7707c4f795e046df933673221228e12555db2f9fd68e5909647037c4b4537335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160755 Malicious code in muda-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bdf6e0691822d902e14b4925aa79e44884a0b9b266c4acd917fb406e9e3286c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159331 Malicious code in manadi-scavior-addo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d5d1b41b240f72f0a01a2b60da4e81e490808ecd8f2a5f73aae70e146e96bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165881 Malicious code in shilang-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c20ee7197d235bd0a10eb43021e0508a23f6abda24c069962c27adbf97233d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167384 Malicious code in teagood-nalikami111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076b734afbe9ef694d0d43704b25812a1d02d38d74b32a20c1cecc99c96ecfc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155159 Malicious code in fitra-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6d9348e36fe37ae57e1d375ad036a519b6f555ba8cd9902fe7645042044b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163985 Malicious code in parwo-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3149813cd96c29ff7c811c175bd9034e12068a33ee8ede1d4b8526679b5d817f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-muaivcascf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d61c5b2b6ade408cbaa6b314e9e641c03b4fcc2af27d07e937c56ae14a86e67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lubki-nasununabaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bb5efd8eb8e5955fa0d589c9a43edb1321361be027c4ef921373c2ecb7a0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d6ddb4a566335d086d9ceaf3d3aaef7c94b7e174cf964e1172b3870cadeefd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avi-aumauaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bf91782c282ef7f62a4acb31a5a5ceb1cadc37906ed890165d81e30840cf53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kilp-akilanuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0734ad23ac7d2c8cd67c6c231f8b273a605c8fd59038395b1391094a7f1db1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...