MAL-2025-158541 Malicious code in lookingan-namakiki31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bca1814b9c1309d0876e5b182299bc2973491170369b0f12f5bebb6ae9629ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170136 Malicious code in upilka-luzi-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3105e7dea03d2e4eb4b1a03dcbeadd383afabd63418a58b68f2e946cb35e5da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155054 Malicious code in fauzi-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323b9482823baa791498b54ee6ac34c1aae8a76d66a2056ff3db8a2b4ef7f6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165292 Malicious code in sabu-nali-luxfbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e64c410be3ad9be04b3880ef64e60e84b98e0493e1b2ef25c9a15711a87bbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163271 Malicious code in nokire-nanali2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28adb2045ab3c09e58ed598d5958b27086144b09604caef6b65db307b5e3c7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165519 Malicious code in sabudaaopa-muyafig-bafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0b599e9b98cacbd5b6fe4788927fb5423de57516f5707e064c46f7a3c7fc4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169614 Malicious code in uarug-miafuai-suatafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5afcd8095c71cd8cec871cab93d0d70450e8c4aa50d69ebbee1315471bdefb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152721 Malicious code in arif-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ec0e63d26cfd8a5af85a88561a7d57623f327c3ef135e3abff003d771130b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161903 Malicious code in nasrul-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea86abc943e37cc7f8b5dcfc064499df553b316548d70669a934b03b3b23ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-deta-tadc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3943e742139f789e145d4992294ea56597aa49d6d75ce9f77b75c01b3176d49c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa436b37cd00ecf8a1f3c427f40600f28ced17dda0b2d4dc8787989460f648c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scavior-ado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f87902e407fcacf77fbdbb7f9d9ead2f4a8c62d8401bd74b6caade1a69a1287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-nurassa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef6735abec9e6783882a15403cdb49c630781de4ee938b2ab5290bd92a121d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162497 Malicious code in nokire-genji11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abe55f55bc741e836fb9b8ba04a6d9ac5c44d1498764f81a4b559dfdbe8ca10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164779 Malicious code in rinto-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7cf61624be4d346a201b0ea00c34142112d0d8cb28e60b8ba44329b100fc262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169184 Malicious code in trevora-cir13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a52e2724bc58cfdcfb2af10a0771ec66c3fb59d892061d28d745bc49cac7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156571 Malicious code in intan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3352e16327f7d0620ee9a4109ccc31a3d9a7b5d62998327471f46c844efce44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163051 Malicious code in nokire-nakala93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5197827a4f629f1e152883e7f7128c903cc7614851a3612db4b5eda3611aa549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/upjusr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0821b2c018d2c24ddccbcac9bc174ffebee9d4a22d5878dd55564332391b920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/eriu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d40e483e962df7d89a6aefb16d193066298291c526c8bff037a123683201f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...