MAL-2025-164092 Malicious code in pilau-akavilu-kionupalabua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f93e4f5c09b23b5a16b8ecedc4f6b56580a41f72b381809ee6005ca61ecfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150819 Malicious code in @miptaa02/mawu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 309ef10cf6c47fa85bb21a066ca1bd6d17b7ceebc686cd09a084dd82b49bf746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168643 Malicious code in tealove-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60141c12d908e6a5445df124a6b5476ded26d4e23edb744786a30e5db874d02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158028 Malicious code in layla-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b80335c8b1b812a2984f33762b423500fa3afc57abf572e064874171e94b27e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162137 Malicious code in nokire-abimanyu25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a21ab917daab28aa62f6fb91f4eddb39c9607076816d8a653dda9cfcda27274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155193 Malicious code in fitrok-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44715323a34293ff3b7be2c374c7f4ac5ba18f40dbffbad4b036f02b648dee33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161307 Malicious code in nabuf-ogaf-doifaogako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a07c7467387fa2baa2c977d12c2b6b48f17210f12721e9f19ba2c4be0bd96cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151204 Malicious code in aben-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e684c3082361f9a7cf3a52c4003d877f281f582469b427ac940d63b497cb41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161776 Malicious code in namadata-munaroha-munis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c42c23bac351ec3e0eb775d107924567fd9e30da9f19471314d3676eb1a35ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152291 Malicious code in alfiansyah-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f77f11144437337a823c98ecfc2d36e87c497a6cbbdf08fb04f5f3594015f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159667 Malicious code in mans-manapa-mana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfe8db28204bac08c8272e135e3649fd27ab42582ddead4a99f7a3206971bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624a3bb1ad494028c57ec3a75c3f6ae510b13f04af44a2e50f0c664f82fb12f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuysata-bunajda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bffaf9da9eee9369d2200eefd9106d05464398765791a7dd7e5945c68eda3f83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kalimasa-vubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4d3225f28e96f2e07ce90301f5547471e1aa2eddf488ba96f6a6c21746b0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upia-lukzli-ilazou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c019bb4871595117aeae746440a2ec1c337cf5c365245eecf0ab676218090694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-dangers-fantma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47abea5b6b38e387b530cb2d65506963f03d3733a3885245e205bda3fc60669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-maranfu-safaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7b55bd01282fe29860c457baab073d33d51177d26819ae356e9141a26183ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4145ed5e69a2f416a92887c17ded78b2dc921fd6f837bc37f3ce068865843cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0536dd66398e9aca4bf9af95c162aee4a257f75e2dbf8d5ca1c871506bafc2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhyu-tanadafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5534951ae30eebf9a05bbabe80b3d6882fbd0b407de269cbdb947b14fa039481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...