MAL-2025-152902 Malicious code in astia-al12f-darhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ff658eccf15ac27c25d2713cedd173dfe02d71b36fb42af1554a5bee5f0e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155006 Malicious code in fatidra-goadaotda-nutdardo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47e117c8f9de26eaa8effb6468fa0db9af5dce63a9491316b847f6eb0a027c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156981 Malicious code in jeep-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6e649fb762a1973f4dc31705e54cca7d3489cf470f898c0c32f4d46c0d8139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168208 Malicious code in tealove-coki5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c40d117aeafbdf7602d8cecee313f6db5024e9657121f1cb820fd17a795454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153662 Malicious code in billa-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c97818d83a489ed7b4e65aca7ecc9317b5900eb8dee40f2c1c0aa3350ff7f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152633 Malicious code in analusia-akfai-asuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fee430d6e83ee61f2a7a29443dccca1b72252c907748a63256b1dabf2511b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165407 Malicious code in sabua-muuyfaafu-dauafufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1b89ca3874a085a931f4e44838944be58c076b5226b1a7d6bb7ed69f78a7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee14c13a4a58d321f2c9c4990f25e028d20a616676fabb19589c80aa3ec5a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3296c93ae306fd15f4e097fdcd2a9b6e65890cd5c326501ea92842a759e3e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-munaro-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908656c7561a295262864e666baf04d6300e1b0d391e86ac54ca4dc54f688263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munisdr-nserf-sarafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbacdd45744f6a002e268ca49cac67e750b7aa4ec611400301557ec8cfec0f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed8b9d3274bb451b310c29a81520ed24a54967bac95ae2ee229614ee41fadb0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iifj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958864736a9a90f0297d702e86db536733059eb87b7ccf39b6327b1eaf5d66f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedarnan-nut-banta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98d5a7ef8803e31b2ae096db721b9745dde7ee8391e1b6c3772ca10413ace29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-faradda-nutraa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070b8024977c1b3a1ea5862db51ed5c8cb2e01d597e8cb0a73a6286e5a5523ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98b49a64d2dc578ee58d96f6a33307649d3c5a35aa784821ea190b1a75c43e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c1dfe60d484993e580cc5f364dfaa6b915858ad6676429ca76e98dbe39af46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-suftiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d989813d1f5f08524c902513c3a30d6ce68ec67ca16ef5ce16dae215b40aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72b4c55653d75c7a501efb5de31e41baed2598fdbee9322ab46f396cb0b00a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauu-faqifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f711c36a6f8d2bc228c0b9dc2459ead7db48f4ebff23162157ceb9d81f102557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...