MAL-2025-153435 Malicious code in avminh-afoagi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b1d7e26d960ce6168f17f4a302e8b8a14f2aced3286249b33cf2522949df8b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153070 Malicious code in avminah-fagiaas-fimokafigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15b2bb8173a8fc76d3a177c6dcf4b8c3f5537fc9d217b7ca89a3becc6df9b76a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159510 Malicious code in manaf-asin-nadbsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e37bb6ddc73155edaf4d8d481f386f37e70cfb50650ca9d666ae27d3c4896e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164210 Malicious code in pilka-luniu-kanulanianiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca71950b323c20b3b3aa4629acc18d017d50e501edb6f6777134d028d74acdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170315 Malicious code in verify-ain-uks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db23131ef3658eb1bf94a40373d258e217fd7324d2b12806bb5a1061bb2c6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154832 Malicious code in fadila-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae01171f73179bfd523787f81850cf231ed53f0d7f5e329f96c8da247ab150a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150710 Malicious code in @miptaa02/gzsaody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9cfc2d66992fc260b3c5e71ff6f461fa25d2666cd90989cc2f5166b0b864fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151277 Malicious code in abiba-avi-aumaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebd5e8bbd6a8ce6bde9ac8fe0f0ca7e8096159ac8252002632ec66fe87c77ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162367 Malicious code in nokire-arhani53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d0e9f3039e88cb4573095c964050ec284d2fca3461dd03707f9adc585239c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161682 Malicious code in nabuf-otomabin-nuyasfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a046588c01ec2fd7f5530111670a42e21f2d48a8b184bdc9b53964c9a5ec924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166295 Malicious code in sunden-diak-vamikamuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed0b5211cdadd9b211ce6796160a86af6f74c931b9e3d4f5eb3b4241e6bc9a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151189 Malicious code in aben-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3d93c4c695452d73e38e8881e871ca03ef7724a83884e398539bc648b77771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159693 Malicious code in mans-manapa-nyurai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49d8fc63f3d4c6f198516086459400e835088c886dfebc9a7d4da416e829d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150673 Malicious code in @miptaa02/fsis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4aff69e1c56951a72fe5de2d3bc673d79b799eab582f6aab2a5fe3342d0ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ccb30bc28658351b12360076de0bb02b9a4bde78035b70560bd66ce171f6e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fafdoaffafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d93f334f270cb5da804021cc9f42fb883d34b0d553e155ec81cb0d7669f84c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-afta-fduf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b5d2900fb395118364ef692a689cd41158af0212a5bffa7dd165ae8c11e0645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salabunli-nalikabuia-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84a6cf6c911e932535801ef783a6e25f20c40e67800fd79fb657ad29a1fa928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukonta-igavufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8daf8de9d5cd4e6ad342ce9dd5d354787db3fca92296c493ebf87ea30964e5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50917b4869592f9b7286a533131df2f29bc31e3cad91fea2aabfb68d5b6f8508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...