MAL-2025-157558 Malicious code in kentung-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda81f924f941dc278f3d94b1a5e567d0801f31d27a5bdd6288016e2f56f6db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-buysa-butsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bc074b50823dec3dd887196c07769146e8da62db5dcc1e84327a78d24be0a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151518 Malicious code in abu-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd6a49686c6d94633eb14279cdd26d65efc915b20338ea6e6d6cc3082ca8e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167706 Malicious code in teagood-namakai50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7608727fa02d8696c60cc05778bd8560dfb5fe5d90ea727ebdc5f4b9e81017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158022 Malicious code in layla-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe737f785adf5f149965e8dcb042d524d4391117ae6c32f273ae13cb074a0d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155826 Malicious code in huda-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242dbaff5902db0aa57180d1ec61710eb9074cbc4103fee0d1d486f24d41e0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167225 Malicious code in teagood-nakama59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7446c31e130e8c69c1bb9763d03c662d5ea4bb769ba39db4e38b3988a6e142a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150286 Malicious code in @mipta1/tualx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3b5ce1bd97dfade4859f59d11ba5cb593a62254fe75eba0ce27ad3208a792f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166204 Malicious code in suharta-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95425fa8fa87c3acfbdc41744f260cb2c926fe47e4d820d8eb8dd4aa0c3a5dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fead89eccdb880a74be8f3053b394cc603dcbb494fb0f25618a04adbdf861b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-0-weq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f388fd78050fda9a1695b94541f40547046b8817f7c4399b0d14e9bbc16ba2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151326 Malicious code in abih-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc8b1aa723507eabded2ec5889e74c1b234b656ea973b1f55927e682a9dc04d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163445 Malicious code in nokire-sekiya54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3744a867fd91624575c71578b3390ec2f12799a2a7bdfac05d77a3c6dc9d4268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158862 Malicious code in lookingan-namalaka5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e6b5a6946e656af345999f9a66b267e2d816c33cff20cbc9c5f108ae0ce78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligufi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cefa73b7346c5995f1ab14e30c1d91c737d30c55c75d2000189b5573ec899f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169465 Malicious code in uafaru-tuamat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ef082721b0da5c098f12b4b40a69cc03c713625c7d48d6478f1d5a2a61e769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagnimas-iofagiggiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4dbf23229135d8d9c441aadd4bf1413a57114013199fd91a081fc250e46e834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puteri-trud-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dfd148d2ff9f48f78d4affe7d60c251b334ec6dc2dd42b5465538dccec467e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-nursedse-mantxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc9d1d3ffc4f5830b63e7c248411df3ed78b56675fdfbaa1f619027fed88f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8dc98f280aa1bc8144e6b8f49ebea4f843548cef3f3d38fcdc2c7d48a606a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...