MAL-2025-157417 Malicious code in kapafovgiaanggapfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20667d2f5e0efd514d3285d4ce86b985bd703b5c5c38cf474c40ae6a595227ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167312 Malicious code in teagood-nakamala47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959d182cfc29fe9b023383637fc388b02042bd39b660c596e79dea1fd155010b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160528 Malicious code in miracle-doki-uikayanki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abebd2d209a2b6291a30d2fa5cd7006a881a6ce488770d89763bbb7386c26860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150352 Malicious code in @mipta19/asisdssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1783219614069c28f8c72a17683c2ba5b1ecb9b6f6c52689a00dc0574aca7b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buatafa-btraa-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfaa33f3c450ba27bfd5093fd4d032d44d9eb154add412998b78d48f8c44f66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160665 Malicious code in modirai-igno-jiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bad3b3d0adea6e332e165538acfc96b7a4063701925f41639b502db4d327760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166566 Malicious code in syahlan-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da351ba959ce2a568c7f72e68928788b6f2b1b63a81e1cc8446cbf8478f7e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169588 Malicious code in uarfug-miu-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daee1354e93f93cabea11a385950fceab8155d4d06d2327326d54bbb3dd522a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154385 Malicious code in diago-kamoi-liumaoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922c0bac4a15adb596e126fc42a78e8706b13de16b19d13423b2dda36b3a9afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149996 Malicious code in @mipta1/dsgsgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4685bca1316bf29cb2ec836a2de1fc90c372df0f7518645b54d431780942229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutr-ssads-mutrio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fe8be05f6c1f72095df92ee7c1bf020e3f3d0fcf0f9262482127a77ee1a86e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojafagaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ab883701dcaa6f7b6f471c9c7fa957d0a2b62c68a1cea47609663b07236570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-nibutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca74ef5a6105a3998e478fefb20f07cdacb4d757eb74e0993e23381ad346a0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/s-creh-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90f673e18e17904b078fcaff1d7aec22326caafe2b33dd71f7785260bf6ca49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91783b711c351183ee41b15feb410c89c96b5cd39c601a826def344a097f6bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc8b1aa723507eabded2ec5889e74c1b234b656ea973b1f55927e682a9dc04d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746fd1eb90d32ba4b85ebc35161cc721d9828710482a14cb4cfbd7653bc8eead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nusdtafr-msiuyu-masta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9a78f8d3398684ef8ccf4206145902238a55a5d88dae9841a9194b0dc0763b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudla-ofog-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db1ca8aec5dfe304cbd21912b36fb18a8cd4cee6423f8d4d6fd5c5fe1b5422ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10423a6d1dd6e3a834052a5570bd1c1fedb40a6eafbf192f57ae8495465af131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...