MAL-2025-153055 Malicious code in avminah-agfifagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d0c921de549bb95c3914920378ada8c9e0c5e8ee89902327142fc6868ac398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160233 Malicious code in mattu-miotboip-nuyadrat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d05ca0ac03dce5157e92e8215dee8ca7f250172ce9ae435a8593739589ca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160715 Malicious code in modirai-igono-jimaifagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7e72465aa9bbdcb11ea584b99737462cb0f8ed218082850a8c860204a55a27f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161241 Malicious code in nabila-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0469ecf0472465f2c8789b10dd1b9b5d00a0165ad425596dcfc2453b76eef8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150262 Malicious code in @mipta1/sura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5187ebb8018dd8c4e964433cda3b616c596dcb42b06c1d58c25fb00e05a039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masioaluan-ofa-batoila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a80f286f5197aff2a05c763277f44e9af7fc237a56e1284f646e8c96b54fe06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-lukzi-iluzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101f7b60f1a2a06bccb535e5fc76d2406888c45eb004a8fbfa39c1103066a45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/eriu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d40e483e962df7d89a6aefb16d193066298291c526c8bff037a123683201f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytdut-dana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8f488bbba7b111ed3fa75577713f770a48e28225ea68d397c6d1605f26d23a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158372 Malicious code in lookingan-nakomi15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c2b5267e0e67f5f8b294447a4ab9b9276b77e050294ecc8e5cf0571a7ac8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170136 Malicious code in upilka-luzi-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3105e7dea03d2e4eb4b1a03dcbeadd383afabd63418a58b68f2e946cb35e5da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666b9c68a57017e77a7bbd80cb54c1170283a7468ce4b6c98406cdd924f2c13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76101e7daec2c0f3c5cd9de41d33cc2da22b803899e23405deaa31678948aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiuga-fiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dd7ee6808091da803510602cfc842dbfe7535101afd4f5a0646fc5ad23b649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c59869b35a5ffed1ab07076045437fbb45d44140775338833197e4e3670eb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomian-dfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8d3bc081e499ded15b63fd70b5b80acfcbdf3b84614c761e1d82fffca4f3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152116 Malicious code in aji-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c801f863a23d4436ed5f0736cefd4faf352d88c911f8802c714637be9ed94c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163638 Malicious code in nokire-zenitsu49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfa8ffd123cffd9b314b26363b8209ae84ca987b1f02c6acdac5e9a8cf13e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161753 Malicious code in namada-nurur-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70962d3af909ab6f63b73e677869a01960f325ba0504944903f220d8bd5e84ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf515f59afe9e6f444a7df859b0a0b5ada5cf6b699be3a599f16af1f5ea9155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...