MAL-2025-183206 Malicious code in kisut-dfg-diwfzcfecdavgcab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2f0339a81ec818e29743546170ff2d8688a53ed7edfb06ea9d65fb3bb0fd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183307 Malicious code in ksut-agg-ibifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771ba25adc0d410d27fc9f1fc406646e5a7b862637f2aa53d3c319617d310b47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176784 Malicious code in nuilva-dakdre-aooanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c388eef5bcd2f436701ed89ddfb3140e47b419b9adfbf5cced296aebb355cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banifobfo-imfaibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b38d7569221c27a3a3440c8116e442a2adda3a2f66d61d723776c1d37030eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177712 Malicious code in polymer-afifa-fasga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bbc1b37d17f458fb0eb5b95665f0b570b653c5667ef09a0fd4937e6b37d620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177645 Malicious code in polymer-afaj-rofsfafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b48a4de9ac554d65d0063c6f77da4a9e4067cbfc3cf0b8df78738661496c948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173772 Malicious code in butry-posiy-poiy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc09c009e8b2ebe9cd036b88f774cd16896ff39c808d8848d9befcbcc2827021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171030 Malicious code in charlottelee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122e7b5b45df94962eac6f75b6dcc9d5b084675c740b7e6c8187495c304dc4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfdada-mivafifd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c69f5d5aa3142f4deed5d5aa743047e4a30e7217d89fe3b36d979fdc695e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lni-limaubikai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60569ba26d8c348bd9f9397a9f89d480cf45d07968796ee0703d2dc931b94c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaihzmi-kulisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f68537f8aba219af7660eae1bad27ba054e90960c6a09cc77cea691b739b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158383 Malicious code in lookingan-nakomi25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733515eb6b4d9adeb43540c53723f2acb96cce913f8fc44db6f2d3ef216c154d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161201 Malicious code in nabila-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c0d8313f5eed921302657b7f1776aeec4b30bbb64f760ac5d6f5b9581d2992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150864 Malicious code in @miptaa02/nothis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbacf5e7cca3e21ca88a08fa59df471f28a1839512ddac57ee914b1c67fc21be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166770 Malicious code in teagood-cuekin1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daec12bee161d9ae80499645f638a7131289ce9cbdf9a3b91507f675d73e5c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159666 Malicious code in mans-manap-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce20956627010af986a164d05e3300b076ed2ebc28b4a1517efed72af06b465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-css-loader-json-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ed9e0c56378cf0db01dbf06e8ed7f5f59821afc593e4fc9501eefb82615d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-npm-yaml-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa37b47332dae889eb886aef463cd255b9f8cdd61f08346e076667848f360354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144514 Malicious code in loglevel-markdown-wolf-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31beec34a4f56a2c17a4993afda0334fde1b331a350a2b875e59aa391ed9c172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-sate24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475214ce29dcfd2cc855342600de8652c7ed59eb08fb72296bbb7aa7b1fe6466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...