MAL-2025-175384 Malicious code in kapvino-somagogamoi-ugafahagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced58545f860ed06451235d66f6d74f73fd6d2148e390066f59176fd31eff54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176560 Malicious code in nuilva-avaim-rusiavantinva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a7341cd834f6724750d74b0a51d7a4186d86a0fa174e069f12125b361ed627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1662c43d1cc039cc31874876994316b068d5e657840cb4441d6e987b4be25d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169590 Malicious code in uarfug-miu-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6398c8f15ef465ce28d8feeb2c247f49a4075c04ee2cc00ece056bf54f2a1df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161247 Malicious code in nabila-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be52ede3d087891bb6641f84abdaa3d602a79c1c35aff2082791f6b61fb527c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-naibkaufam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd3ee51cfe95815eb79bf7e5644c557a42cf588096a7533f35643dec588f306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160068 Malicious code in manurung-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b08cc8314c3ade92e6947f1f89b2a1ab509ae4b7e49f7972a971c5e1b6d0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163941 Malicious code in pajero-cir13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454188a6c3bf63e07add569ecbdd750737d28298d532b71923fd509ee7e72238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05bc55a2ac15aad72b55eb66d0997679ad697cacf1735660951a678256f0009f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-kaialbu-kiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe28014b883758af644a3142022c5a929a09eae72849ca440759351a532e153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162298 Malicious code in nokire-akaza81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6db1ae1766f210273558146c34626504802cff844501ec740208bcd07d724da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-docusaurus-telesto-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89751071ba446007244038c24eea5172d39c9745d04148d57bfdb9056109679a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140122 Malicious code in bootstrap-standard-yonder-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ac6199e03c58154dfd853a5ca4b290af0a81c5f809ac9ac34e7cacfdfed49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-bakwan98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e4ebcca60e90c927ad6e493c1f10d6827d552bda7074f325de7a4d5f73921f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kepok76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41217a060afcb29e62748e6b54c7c8e0742bd954f15eed489658bd5cdd98b793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extraordinary_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8e9f84540c73524ee5c48797d91c90fec53cf6e7e308888315117c13037a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136816 Malicious code in salty_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45905bf0c2192d27d0dfeb93b26f692a996b9f6d2ede4a5094e881facf07fda9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-bakso98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed3ae84241cabde7ef511539fedc7943c2e1e8a8c28c3dcc1a32081a136a8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-martabak33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb517f48ac48aaa39add3850d9e38086bdabef4dad63e6e29db7a0cf9724c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-empal92-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab11e929367729a821273eda33f0e4315dd3cac01d0a232793efeec9eb0afaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...