MAL-2025-164401 Malicious code in polymedarnan-nufatima-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e50c3bd099003dabde9278e1302fac7725633e3e6556f791829a5cf72d9c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150020 Malicious code in @mipta1/ffssesusid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f286b2a5f77bd2c8705638e0fb541b7e408e4906287bac5e47803ee96caae9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160108 Malicious code in manus-tavauil-maoiati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b04f0d38691a6ed6222a9e9484c5ad6649b3f58cac611a7b9e41a736bc50a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165024 Malicious code in rival-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0a41095eb89527e446b21b9fe8644b6a04cc9d18a78cef7ed7170502d7e9d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-nalasablui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a4317f8280e6bad0976ab62a2ec92eaaa596b8ee585cc8cba313a976c1eefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbc7d69ed0fd62918ff6a79f463ee0f399215bfd43736516902fd225b7d959e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/waht (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017a64e536685a1ee7c63003446abf490ffb4f3ee8b26c226f6a7831d1b86854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179c3ee70fef5fd9705797b1cac2c00821db0c28661ceb980f70cf398619b0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afai-famauaofaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95bd062f80f78e284acbda8d9b94c291e38164025b7902f57eb428ef152eaf36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdf1542e5e0afe5c49e170d9bcd5272a4d8bf44a12d34c33ad1e0557928dfdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a78cf500b4acf168e6bce3b9e99c825a5452955c14f008bec79ec1dbd0e5979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a41d1bfd4a8e28ef1717bef1da0b4ff7ef156d1546b5d64664c2eae3cc4cd7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150112 Malicious code in @mipta1/lansia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dce3bcb73e7ccca80e2ab771b281883948fde38e738b9459173cacc02c53979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152454 Malicious code in alvira-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d03f418e86779742e43fff3115cb200316626239a643d4773f03bfe30f8251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160695 Malicious code in modirai-igno-jinnuhifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca035e3a341ed9a3036739aa667e7cf5bef66f458ec9dadbdfcd201c6ab01462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163530 Malicious code in nokire-zabuza40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83dd737b0a8cad69d472573f79f790a918ecf585a96b3639b269491046692463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169994 Malicious code in uinsu-lotaihmi-nakaanaimlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd642f3a5388df3789c8d9f5071e175eb23d7c0544415193cf0c8dd1a77d67bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158531 Malicious code in lookingan-namakiki22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f8345424cdd0a9b67d4f79ee821194161d15c4aa30740524fec7207f18a8bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153624 Malicious code in azhar-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00da411c8dea33eadfb6324d81612ddb9273f2494c582a3b590fb72a78edf57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155577 Malicious code in hafiz-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea001d280aa84d4c6f904e627f8ba45948e82cb51e7f5d7c59adf09ee7506075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...