MAL-2025-153915 Malicious code in bufai-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db584af0ccb3e9d4271f38f499ea1f7ce35d5604b9a64ab75862e05a1a61027c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168646 Malicious code in tealove-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ebd16a26b2c43a10718386188203ee4d3bf44e955a462d64c2e6d058acabb1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168609 Malicious code in tealove-okta31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd7f987a2fee759d6b1f952d72968f5087877360a823c26093b65d20ffb4fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161017 Malicious code in musasiak-naik-gunu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9899e758b52711983edcf23cc0abd8d663a71a05f2e3a3e05c34f1085e2dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159818 Malicious code in mansila-tiafala-magololani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61d2d92a74634a5a603ddb7986d0d96ac823a020765f3c557c5b61ce40a19a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162557 Malicious code in nokire-genji66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 349e55ce6173bed5d949d0c28d0673eff27ef05d9f6f08a72e81223ba665f1da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161735 Malicious code in namada-kasito-guta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8a808fa4bd39b3275439ec242ba28e51d6b7b6bf5129d8cbe5eaf3a82a9866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150225 Malicious code in @mipta1/sdasxs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e781b5a177d5911733dd71316f1c806b527b80dee371ca45638887c61bb4469c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164807 Malicious code in rinto-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d990c66cef5395d3cb372167ba80ef1f545f5f670b6dcc2cf1e629907908a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155672 Malicious code in hariyono-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41692bfd7637c95bdb6c2a6e740bc056ebb2ee3a27b3c7dd3337b1ac1aa39b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164365 Malicious code in poliaina-aikki-alai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902f348c1daffe74021ad4a7dba97337c2a09f268a7d3e5cae95a531ba626267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166852 Malicious code in teagood-cuekin83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd4829f19a6085265cac95fd221ecbdb6ecf716d7dcbc71f01bac43a0859b64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160880 Malicious code in munir-butya-miun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ffbaef8ebd7404c7bfdf3a3a67f1e57d7ebabca3304ca84b1727ebd5b493a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nioybnali-lauykia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8bc386f9b02097a5cb9efb1ff42962421548df310bfc901ac1624872014e88e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimoi-aiokamki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1a7f292b0f96a58c08c2c24e7137fc933b60238f750f6863d5fc61947cfbe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moloipe-asinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8667eda317f467afae5a1e5282228c6027396d3ffe32c3089896452b68136412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ssghafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95391f099b0f6d20a2b6c2d124df05f7a9c7a80e610e16df10a620698b4b8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugi-anupmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c299efbf53ef4b6c53c41c9e4738326f3c37055ec52416165d3fe8399fad5647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahaf0faheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856c4ccbb76699949bbb4ba01fbfe962e9adb6d3d1a453c81676b696267d0b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pj-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca64e14f0fe2f163a0f20d66fe79655489febcdcb06eb10a91f45e1d94bb0e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...