MAL-2025-151477 Malicious code in abiuba-avimungi-agatoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7895b49400c01b2034bb65ccef3d0667d4709e5fcf53797ac9917538552083b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155222 Malicious code in fitrok-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cd4f506f89bde89774d05f73ce2ccac204cabaab8f5b1ef77056be54f0ca40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162640 Malicious code in nokire-kilua5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a5c6f0152d4d7f26a2952987fd734f37f2599119750e4ac606a1f2e2bac8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157229 Malicious code in jurss-zsaa-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8006fb94fb09742b16d98090fdd74f710194765beb60da725ccddf32f2b93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b3f543200123d69ec4385c195dd7a0bffc8aabbc0a98e3f1f62e07201e4202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155551 Malicious code in gurs-nurassa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef6735abec9e6783882a15403cdb49c630781de4ee938b2ab5290bd92a121d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad72580e6aa3d669ce3aff32962a1a76a1d549ec14a6b8520000263d5b796ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotahi-nalu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c9779c7cb7cf3898c1985689cc12367f27b372cf2ff49a90a85384210b6f8cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9ba065579479e80605babb0de074d9f6ce469fab8ef26d337ed5c74a1705b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhayu-tadaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69035aef4aa4b8bb26c506724a84827bfc3519c1461257adeedd700ea357e575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67c0530498bf683915e562d36550594c2d60024a4a70076eca4be52b32f0e2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece2a6f99f606e16a251f76ad94c371403ca747115c49573cdd34f231498dd3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167496 Malicious code in teagood-nalikami91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56f9497cc3f9a83fcfefe625992d1a45819ed4b3e5b7259cea7a33464e2b9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156756 Malicious code in inufi-gobali-januabali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734a72a1aec4cdedaa0349c3d8896c720441f1c63b56a32853a2019df843215d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159617 Malicious code in manda-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642de07dac424184be3333b4eb486fff6b8e3cb3e1cffa9af839ac710e0ab217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161410 Malicious code in nabuf-otgigaf-dofajggi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617432e437415b6df8f802657fb6da9722975f4769d57fb516a62162470054cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165053 Malicious code in rival-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b010306801ebdb9db6e94a32d35f4d925582f1b2bc007c3eacdf60c0a48d571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150652 Malicious code in @miptaa02/fisak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9827df1733cbf29b6cc424762bcc0b9d031b64dbb944d6b08df58e96427a6395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-natib-yl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108e5dc7e095bc4b9bf356bb8250fb3ee226555f7c1db69341d730c2b46d935c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155455 Malicious code in guras-nutra-nuyia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5f256a4ab6cfb8fcf696d0f7e0467a5902756989262058d631190f83e6496c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...