MAL-2025-154026 Malicious code in carv-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f5efb54dffe3e8093211f6623f4e521fa3a1e350723479eef0780fd6b86ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164796 Malicious code in rinto-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c98556e783a0f828eb1a94dc69fff38f89790eaabb6292f5e3c64d43239d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156803 Malicious code in iomodra-fuoa-jaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8940dcd20e00962e0fba05cc550d027bff25cb0228234c5f3e9141d4d70a355e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155651 Malicious code in hafiz-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68127e681d4f1ab0e058e8d640213b9ec973d31969ab4fd8c2aa6ba0e72662e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157209 Malicious code in jurss-sdd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b630226d079499eda35130407a40d0016b613cf98059bc31f62f3db7a2c598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151817 Malicious code in aiboa-mioloipe-agat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17892c1e9703e9aba5c9ed6cf0b754f823ad760449900427152c7ef8a026e53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166951 Malicious code in teagood-lokika82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b813430588984c2947fff87e2d2b660e1c4f746c1900c439655c2fea94c6f893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153974 Malicious code in bufpani-myau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d5b595c92144b889280be2bba44062af9e4a4be2d42ac2d88d3666ae0ec39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168615 Malicious code in tealove-okta37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511380a2f0df780d4fd83bc19b5ba5a41c6d7dc1f90a19c81c7c3de087d8832f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a523562d60e1da58de64f80041dabba254b5a6566db091dcd153132ad1e7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0be0ce3d261c583e0120c8f6f6cbf5022b47467c7ead27355f3be4863a78c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0a21cf43d595ddaaaa745f78a92b84cf02b441c64317b39e72e67ea86495c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyilud-vamunauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3714fd5f7afe579cff0c0a9f0a67a659684bf13c83e1372b8e02940db3bb79e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamoi-alaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898872a7865d276ea81a9257ae122f8029ecbf0865d606d0ac1079dd34df8a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abufda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928f5549a14f2b1455a748fb91b175573ba88d979622e4e3dec288ff792640ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotsi-banl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a346cc64835fcdd33082f22a49b24f90b5b6207a74dc74ec7b5e7f3b3678f4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanukakubaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293d2588639aaaae436852cab30c97d424869161aed620a9532b9c7a4d004e3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1703e7d2a5dcb7b50925220648e569ef3c724007284dd2eff9b6eee742ac93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbian-ifbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719c184eb94768000d26e09da5d4175a39571e54bd60c2e4055815035bb4354c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e935ccb3b06a6dfaa20c831bdf1dbe0e442f17ceb8f4007e7e6ab9d54e00e6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...