MAL-2025-153286 Malicious code in avminh-afaais-figufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f602d230f8ecd9220369efc7fe72042ab296c3512eaa99218d8ce3b8a8cf01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a28dde05e5c2f1cfae893875dc0c01fe9147f8a3e698e23e012d0661254f5754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/asdfzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf73f336c1dd1acf4313987d10f1c94158e835135681909189fe38b66e33927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f251a0dc4394d7a659b1d8c624e6ef14721b05547bbe145f383732eeff8ff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aimau-upuasoanmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35299010e76a45142a3719e287b2d448578f3c5c277df5b074f5c1ecb70d3c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafu-tuyadat-datut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3edbc52a7133e4b9240daef7a21cb47b4dd791d77cea7f301f6774e024be53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ed56c8b2a5cc3aff48c79836fffa8bcb737a4af149214769f4c3280e8ad771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414cef0b309c9ae0b3a6b05c08479d81bfbbf8ff910725252e8c32aa67889842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91c0f3e3f1a9a3f614eadc1f2c281101c150afb9a75f298cbef921633f1b9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/easgr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457d0975d6ba650be8ca3010c6d189b2e55c46f5c120f8ea3fbaebf8727c6493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pajero-cir3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa8c483a48c4a4803459212ddbfb1111a63b19bc77fbea781654d7077633546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da210d90efa282fe8160756200afd1912cd237e0a7fb0f045501ed5303605f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-au-idun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c7fe4e1afb2b84262c45dfe7bb5f67974fafb8ae0683a85bda3f6e2106cf21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ff909882e52a3811e7a630668e9d4ba74a5423082e317f951cbab997571bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156820 Malicious code in iqbal-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4748973cbc1101da61acd6f73f0e3efa90a5cb0d1996507e12d8e1d31a2787c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160813 Malicious code in muklis-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e78bc4854daed77473f263a66b8f50e2a536f8e6c9b0d54c1e28a66cc2d484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158237 Malicious code in lintang-tea74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbee917620dba82504fe43fffc207fe646dd1a66ec80194cf19def818ddb764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152805 Malicious code in arif-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c3b0d40d239ac97ddad3c8a9624e0cbd111e33061517e2e46cf693aad60bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163019 Malicious code in nokire-nakala64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe2e280adaeb7bbf500ba134027686869643fb2f89228b39880ef1c16ef2343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151793 Malicious code in aiboa-milipe-apmumpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4366381352d7b9f7f1e351d6efe48bfcbb33567d0592b0fad5fe4daeea90c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...