MAL-2025-151745 Malicious code in aciyua-idust-dajaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed33cb1c4ffe2a0cfd259f35a394a0ccbb8d7361ca2016f9822a6173cb008c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163170 Malicious code in nokire-nana19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fb67f371cc74c5f1c69cc495ccf7020e1ac6589a77f94144c66752ba3ae8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157049 Malicious code in jelek-rasis-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf580b0d87536a4236be19db2b41e3e978c45a912e42be45ec97eb8cee703944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154355 Malicious code in diago-kamli-luabaoiquak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169f7ea8c640856accdad56f01af24c2ddb23b8960aeee52fc579b62a5a4ed5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeba76b3f734b47a24293de1635b3cc45bc0abe766bb6f9823cb9fe0625488ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d8cb415430db290e64da4f9adbac0436841ede314f7e208e51b1921fe99330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-dilabbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20d6098306a51a2943c3fc30d2b33c6ef7b2e7440619ede7d5f512e559d1172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3730a6b691a5408d37f78a3c36c23e4960ec68f30d93905ea339381ced4009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uofigapfuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79316b7021ce66b05d2d037c876593cd71293d3367697f34409dc1986c852c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poli-akilamu-lunakiunamnai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4960671a99c6674eafb54c5c11831bac26883cadf15ea34fa3613af6b16497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in f-bendera-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6076e2836af6edbb4a2bf6805003104f5f4d67a0b00de8b383c3fc0b0500eb44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupa-lubizfzdlio-igugfsdgdfdgsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5242f1637fb971109e32b26151e8a94548f5ac85e67660d51b6d2af7a3cffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21195d106fa8d3df5720b0a04be072d93cae6d15756c2c05457541a661f7e57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-ggaff-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a00dec67b6d2bd92effc919904e50ebd3f7f4525265263087962fcdfa8f26fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167385 Malicious code in teagood-nalikami112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9d33356f7e10e00d195f07ee31352580161f2f60348e80452a9578855d2891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162988 Malicious code in nokire-nakala35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f220ef0ae9134f6102a3b77c94b49bafcad33b84a891e1925eb895dea092847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163513 Malicious code in nokire-zabuza25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ae9944b77f86d0cb1511a54f74373cb9f4bd4fdb57419953d958a737f9fafb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157011 Malicious code in jeep-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49c838dcea3e2ed6cbfb080ce63eebd1898a01e0a4576ee7c1bc298586444bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166522 Malicious code in syahlan-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ca17980e0546ffd615753902d9bac863adb90f4ad069307ebd0ba052c6a906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157168 Malicious code in jurss-gasasd-14s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e5d97d87cd09c7931da47f1e11e7708b9d6e341634d20af40e75966e1c1b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...