MAL-2025-156952 Malicious code in ita-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4688caeb725ccf23f9f2f3d510df09d3772fffccd8887f0d40f1c7772c5b2a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scavior-darena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56732962af9ac17460e9df5daafce33cd57a929acf0725f70adcde86bba5bc84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gfobai-jiagitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a82c63d9996c2bedfb95371ad969d4626b1813f9f9476b6aea135049cc50989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayisali-ganis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d0832590813ebd362a77d59e833f0a76d05a6bebfcc3a6ff1e330676b11d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgaf-dfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684b7e9c0ea4217974295ebbc57d6943866e3a98e314df6881052b7d1eb4cd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapai-afaaa-agda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc74cb05b3a17d18bc4a5ac41c2bfd2eaa865b7b7a230f9966a36763fe05d585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1711610314644696057932374039f0f21dab8940580d13c3c48720b18aab736f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158441 Malicious code in lookingan-nalako32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96869e83e9438fd35d178d8eb5f0f51467d3ae4fcce7432a35035b4daf27021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22c443ddd6ed6440ac548ff86fb08571424413aa7d37a080003d5a0fa78c35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151330 Malicious code in abih-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e72cbb08662af8222acff51ffc38c2df0124e6bc7bd24daf26ceba7e47a724a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e518e2d2465ea0912a1f3172508480259c474ecabd1662c6c7a1beaa5ea21e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158466 Malicious code in lookingan-nalako55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e90a43139c6813eebe2ad6da8adb1562b12f317515738c77a217af76319f366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156309 Malicious code in ilop-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ecb2b77ac2a7d3f6932b83e0f435777e3e32b0ceb1de27aa007bed3886eae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munisdr-nserf-sarafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbacdd45744f6a002e268ca49cac67e750b7aa4ec611400301557ec8cfec0f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152585 Malicious code in anais-pafnolai-asigoga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d993df1bd5b794b642b24dbf1d33447bf5f7fc4d9653d562901c23de98ff962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155536 Malicious code in gurs-miptahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d5db92bb9d76b904da5ad88a89c6315611e2d23ef462c89759ea36e55b340c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masako-males-niudrss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b9e311c642b4fc1b9f442c805f27eaedd1b3ce516a4a6f10b3d468c95af12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150447 Malicious code in @mipta19/slav1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6518259c60500edb6065000588f2338f9b12e87e9305aa196c75db8e94e0d783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170372 Malicious code in verify-ayca-amilsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4366090512737b57def75f31d142852e96f155f771bebe117e5cef76e5fac33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155548 Malicious code in gurs-nuradzssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8c14c5be1fc648d4bbcd8e32ecc24c775a00375e7a340cf4aa7809236cee77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...