MAL-2025-152440 Malicious code in alvino-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9f7e829e7370774c662c6076b559208dd6472c853a77a4b1359e4de738889c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164240 Malicious code in piluka-kaialbu-kiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe28014b883758af644a3142022c5a929a09eae72849ca440759351a532e153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168897 Malicious code in technical-alobio-tolanaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69bb046a243b7b62cbc0004e6a61c7705c354467efee267f30cf54d3bc246cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158505 Malicious code in lookingan-nalako90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e6f964e85d936c4c846a6cb16f86acb9b08e04620fbada0a44aa6b77966c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169149 Malicious code in trevora-ccissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08cf1200d4732b647c13c49fa5876f223b91acad0da4a18cc42f7930027b250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164171 Malicious code in pilka-lniu-kanka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82218de0ee34bb708dd5431e2a14ce5359b7f0d951d1f2b60eb4aeb0a4b82ecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164719 Malicious code in rino-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13597dfa214cae42d2b63c2b45f7910b421b42cf73a7bc4df0591900bb1f49e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162008 Malicious code in nasution-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce0c3d857a2d4340cb28d170c86634c33799a53ed687f65cab1ed189f9ee5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159368 Malicious code in manadsi-safadia-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b493f74dcb9c3fdb730c73ac03c1424b7c863470f9ca8a180179a3b1ba3d54e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabu-nalui-lunbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666082d87f861d1b6951264ed6461787b6dd8f47f9d423d0f94f5ce8a5a65bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159314 Malicious code in manadi-scaior-darena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cff1893d5c8a1428a97ad4cac4f4096292d5a6a97b5adc8641ba784c15f20d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fagais-ogyaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a83d6fe020011a939a67a3626cfffaa2243931da8cb7dde0166ed0008977bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikn-misualabaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83af1987267f371b35bf3102ced7dea18d065f7fa4af17335bbe4264949fb09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/diun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be556116e6eff44c31ec222847f3873b0fd1f888b981898490d13eebd3e1ab23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59e3373c0c6681e9ab99d5f4c6fa463b988f328e5927baabeaca1febf0adf52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-naururl-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c540c73a8c9683f5030e3e20b017edfc7447fccd974d5a61c14c700159324503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofa-batouila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7270dfd155c02b9a0dbdafd7f2ebe93415696c4ebb50364285278943e2750f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhafi-nyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2c3bae652d774482821200fafbe70da67fe620cc5fc88a0a925bf907f91269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8e0119820105aed19aa036174fe9a43328068b04e5e52d63913e30a6079433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d267eda4842bc0b185608fa0518048dd74fc5d220711aa58203831f2ee30d7c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...