MAL-2025-158647 Malicious code in lookingan-namakita37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d872d84cedfb18368d34fbcbedcef483211b310044b44ea7e8f1e7e065a05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163745 Malicious code in nudela-agfafof-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f4c021f8864528141f139db1a580e497c8d9d32c639579b6b1d457410b56e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154135 Malicious code in cio-cookik-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f758d017ade4a1c9ff5b93b423371f788b0a793ae5acd34d5bf9418fb024ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162213 Malicious code in nokire-abimanyu94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3436241247c7073b0f2d2948a6f09ae1f7e494856c92bd73d708a564e6fc925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165580 Malicious code in saku-ai-ups012uszzgxgiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79186aa65a8793620992b9d71a49ea987553eb8a50e349179748343f218d83f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161477 Malicious code in nabuf-otimon-g0afigagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee898817ff9930f66a27bdeb396e265a920babe0b348c8494399f69525b23943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153194 Malicious code in avminah-fagmas-diagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4048748e8efe59a979a87c64ce1d7139af754da60543efa64c1127a4cf111b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168795 Malicious code in tealoveness65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26aeae99b37fffd4839851c725a48414d92335588bb418fde6c953791598d501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162716 Malicious code in nokire-kore29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7498c2049146dc0841650aa7ec80f2366d960ee8a2d39a650939ce1b970b8072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155602 Malicious code in hafiz-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808b75fb894721c2e58ec478868df9f17b6f907aa74c87c75344c6d3a0d7a559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154881 Malicious code in fadila-poke146 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9f49db90e4821965f3c5d6fe2ccb9b2ea4474c7480a8da898f5f40638d947a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153212 Malicious code in avminah-fagmas-fogogfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f85ab00c0c95eaa805dc2578c37108d3a95def17b00f47e7dc3a455ad15fd7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150927 Malicious code in @miptaa02/ryu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d13179f102eec07c6341f33622a11cb92adfa7a4ff32effac30f1a83b84aad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbecf560074c5d52e809fd273273bfa13b7fb60b5156e276e1742326822fda20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabulai-nali-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342dcacce0a1fd7afca33639b6a843dad25632874220b6f018f39f862e9c61de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02b2fa9aab585b4fc1f75713bf7c9570f8113c1c0c08137ce63dd6f79cecbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc12dc66ac7599b9d7c68ac157e1610b7081b21c2e0d06b1a8521e01d5a12756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-muio-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9d15d66bb2d5707de9b63e5ba11f9149f172c8d36677d190e5c6c6422d21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asasix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290b8efca46d64a095cf522f1acd77cd38e7fa532bdb3b1750f565050284f1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-davu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f655d50d4fa7a1627aaea3f159a5bbdf9f3a5cce7a6b0f8e6e4b14286b32ac1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...