MAL-2025-153206 Malicious code in avminah-fagmas-diogg1aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527acd7c3f1d7e29a77ef892ad88f9cceb80dc8a1385ec8536b9b1bf4a011d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toaviala-madoiibsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14496e2e4f01ee67e8e8c5f8f06c38db0a20b0ad66308eed716b8c8900747233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-kamali-bicupibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94838c504238237b559d99fb3721766656e5e1371dc66c3fc911e30d1698d59d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4ec2b31ba36680d7a5187c6f80907536e2665671c0c34ecf618cefa62c4d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5617f4b1b2d746bd652f17ab0e7ab5e2c4d4ce1ddc577d81d0616df63d00d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163831 Malicious code in nudela-rahfaeg-naahsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe2d349d3d1ff87237ee100ce16e77fa5d33ea7b47687c059d37d41862f4735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162349 Malicious code in nokire-arhani37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cc490afe9aa0bae275c1db07317d2491fc5c699e671fd2297fac1db4acd45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160439 Malicious code in milisa-mioyayf-muioskfp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba51c227e6edb5865be310e9c2f77c83d629e01090a78d48133a33650455b736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149984 Malicious code in @mipta1/dicasx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4584067f199e95c4b5dd86d76a376c6c911259a114315fdda605de6c92afd6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unofagoagi-gmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51df2a9e37140fe462e7a18899a12703873e31f766b2aab4ba03932d698fe7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150031 Malicious code in @mipta1/ghds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f0f85f74c1de5fa742996172e323def05f150e61dfd243a97190c7e5830576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11908a85bddb468dcadf339969fab0e76a571883a83b9fa10f398fbd9519540c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansioda-nomiaduai-mufngu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b5686f1fefbf51098cc0f725e9539f802f795389b5cb10ffe27dedcef45718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162745 Malicious code in nokire-korean14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d91afb7bb63713c0cbdc01026270517e971ba792fbac55260c142c2f50fa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153400 Malicious code in avminh-afgais-fafdosafiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d96bac10b49d3ee888d6683bf3aa5cbde5c9dd083aa7470562cecbac510aedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150734 Malicious code in @miptaa02/ikadasao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535a293c320995bafa9140f8150743ad2aea12856d25d883b82c2f6cf3c1b18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169986 Malicious code in uinsu-lotaihmi-kaanaimlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79f0697721e90f90c969493db08b3bc12fe3c81808c6d52dd74f03c5b5cc1724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154836 Malicious code in fadila-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b07785b617367d056f57f5a493b85d6e4a083e52b70be71edf9e49bfe6f085d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uylud-vamknin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1aea3cf87f926e72ad7f960de6d4c730c23d0a2f4a5d5ede33b4a6ca612a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcff0b05f958bd2c17725d33fffda987f12392ddeab2c1f9fc7e40b9994f3762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...