MAL-2025-160692 Malicious code in modirai-igno-jinnaguhifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840856f52d78d1517e1e1341574aaa89a6524016c26c5795f16685000421fbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159165 Malicious code in makaimaigan-aniga-guagiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951aa0bc6f3bf0cf87ff0003ce064e689fc942f1d25b22fe6358d25a97f72430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168100 Malicious code in tealove-aruma43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb33e86fcd42a51356ae19478da434fd5cd4da0bbe0993bf342dd164a6d2b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0d7bb81264e04ef60db836f214e6715344f5913389e527455435b5c87b853c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164749 Malicious code in rino-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7a7ef108ef5693025803ed428c5871af506905f0da56f11cd95bc008b63904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165791 Malicious code in sau-nakio-ups012uszzgxgfiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02865e75c6124eed754dd4418e0e26ff6db1ef4a05d3dcdd5bd59033ae6a25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150038 Malicious code in @mipta1/gqasaass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8576beb7a932782fd1cac5f2563639db077c58bab1d715165188616ce88ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164441 Malicious code in polymedr-minus-buipenajara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebadc9e2924b32a42a9fb94214c86dcd8636cb385ebbae61dc3d32832cdc7b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156972 Malicious code in ita-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4a846201510313bd8ac2d7ded2f5061336430752f69da458fd429307f2aa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163816 Malicious code in nudela-ofgfaf-gajfhhagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85e3cde6d32bedd69afa84a6a5782f3454d60b881f63bdc83e13a17649f7097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153328 Malicious code in avminh-afai-fafoaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b21b8e749a5e79396e5a86029f7756e35d8c4f0f8586b1d96c25671c3b81c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159284 Malicious code in man-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405a71231ed434ef458ec04fda23f12b8f89682977d59a9c01046d7552b3c41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169035 Malicious code in tehah-nutar-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c856561fbc69f482943b9dffbe62706dc4718a5f35b517cb1bb4f5e02493e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164907 Malicious code in rita-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b856c3bfa71c55d1bfec25ea65eb03b786082a1ce05de382e9104dd15cf4741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167072 Malicious code in teagood-manaki100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520759cd423bb98840de1c99a8433398f3a8f4ba6128ce04748739834f07de57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88209dbc9f546f304d3907deb5a544978efa2fa1afd826a15a9724200d6c55f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-ma-sayuuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ba49a838681c56ddc259a69626d96c26b3058dc3619bf06b7814d20063c4ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145299 Malicious code in natural-indigo-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f37c805f6dd061de76399d9b52952b76e3b19b28a3fe2cad5acb0416bf9ae9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-tailwindcss-got-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-jwt-transform-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dab769d42a98e5e3a53c842163f9c5d812b5bdb3e8f41c58b8ffaaa433b7e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...