MAL-2025-160292 Malicious code in messi-ata-fuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9180d65291e2127f34b75e4df2fdbc020b802c0b1f9eafe36cf126e9e65a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153178 Malicious code in avminah-fagmas-adgmifaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5be06952ebce81287161ad0d2f8744f49a103b35ac956781bb9d17fc995a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162408 Malicious code in nokire-arhani90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c16b05aea4e8b3f0d914cc1b245c210516920fde6ba6c6ad46ecfe91f4d1e89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155628 Malicious code in hafiz-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e200415de9bc407d6a5a8e0bae03ccdc28be71a71dea17e63e3e081cbf9aac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157317 Malicious code in kamasada-nusata-buajidibdan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d981a673c2269b148d73e4db0ed8f9563c93cc9bb4ff0b976da6ec4a589bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160093 Malicious code in manurung-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd68e726b040ba3ccc2844b94c0b18755823a38312c9a5a1ec263fe45f033671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/iynujmg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed06ebb26694b1fe2e82d5c8dec2fa638f3bf575d319613efe4d0eeecb97fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4635939550cf4bf7beb47abc53f7648128ced7c18ac481ccb63643a979bf5502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyafig-budaffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29dccd0c1b791a08aace841e9361d2990ad57a57b855c5f39d30c1fb33469f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luviaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edfe459cc968f4f92dd6248fb5f0a60b334e169988e25db7e5365da1cef90db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyud-vamukaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5a6a11ebc4ef686f3180c46e00004a30392b9f3429d34fbefb994f6ced1062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153502 Malicious code in avomainah-fragas-ofafuaffau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548f1600d0bc2c584ecd545d21ac2e8c7710472ac24ca8d97e88aa3dd08edb31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162619 Malicious code in nokire-kilua31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5491dd41d043ab69574eb2d7e999c1080e86366c66565dc04c86b2b03ca73378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160744 Malicious code in muda-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb846ba3be78e9278978e375368f89bd612ebcf9703f3c89fa068dd9eaa777bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170122 Malicious code in upiila-lukzli-ilazou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddfb2dbcebf92d72de16f95cd22934f1a90c117288873e860fc8df995363f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155090 Malicious code in finish-3-mewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c03cbbd778dbeb7660757ac831ba4c8a7fc5c030c8d50b36518699e7ed4c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150753 Malicious code in @miptaa02/iris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9c22ff81e77e698805918dd5f2721f4e72b1161a228174829625792c581eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167017 Malicious code in teagood-lokina51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a261d538b52f89870c4316bc0bf4974990725871769e03255009fac5e4103bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158107 Malicious code in lina-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51970b0eea68e34d3b18a4440f946903fdb7034bcdc8de12ea0c2bb2cb696396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168012 Malicious code in teagood-yakuza53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce121f732f42d1adb269569e7adbde0ecdf87d0a0cbfdbbc261419fa9e25fe10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...