MAL-2025-153965 Malicious code in bufpani-muisyau-fanmfmfiafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f06518d14db583b26a26c3345c12daad9114d4a63677d448e138892932c09cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157633 Malicious code in keyla-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9460c8b135b4bfaaf1a37ee0c8bc7ef12be02fadb5f0a747fae08d803c7e4ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158453 Malicious code in lookingan-nalako43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e2df16b9b1266a18a9218074bed3e8b4f2d371eb5c27c80dfb73e9b833fbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152576 Malicious code in alvito-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80e85a42fa52629730bcdfa4537a368ed5d950f02312cd8fd149d63bf312f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159668 Malicious code in mans-manapa-manfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd330223e3ee1f9292f4ca94d37ddd72323788d1d91c8adf01df893d39c4d9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156621 Malicious code in inufgi-gobagli-janiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85de84577b829bb66c561407af801f410f0a430451f02706fc1ca1a9f8d3aa75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168719 Malicious code in tealove-reborn42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639174829aa84dfe065e42a7e68aea0c4169244e93b6c41b19eb51eca97e7442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154880 Malicious code in fadila-poke145 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49bf126af0c54a6b3b3261c300180ef1055cb22095357cd75d730382471ab345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164512 Malicious code in prayoga-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13fa8d2568d9910a4069cb47e6796586513da25bb5bd84e6ab411256f5bd2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164115 Malicious code in pilka-kali-nubikvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8249fbda3b214c553a8b6cb992a790b70878d83c0b027122334c4f4caee7744f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff47782737529fb909978601b27a04a5acecdf733a31fd7a689b8fcd1877a118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyafig-budafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3650dc3b0443477c3911e6596152f09953b3035020f508e0787aaea5b3a4274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-assssin-muanst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd820a46e6ab146a004d83418c9f5d93bf372279b318b5a9515cde0452ec455e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9885ef2f105824a42017370643abc975e091a848f336ff8eb9e51116fc9095f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amoavugi-aninahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b6299c2494125fd053a4f54ae9831ac7b049406808c8fc4dbe682be4711f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-aras-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e56570f254d1c253d1136e60354ca2b65914c9da018ed6aa4a07a25cefc19a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d1dfc973ea97a81de01be80e9c3b2d2f7c123afd2c38ac2b272c1bded3e99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025adf91a7806c4b96106845c2ae7460a4e025ab33ff1933de123ea58f1e0d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmban-iagisfjpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae4b7b8a95622dafd850a1590b2945d31a843dd5b2c63deb0f1f5c12e8d033e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150510 Malicious code in @miptaa02/argg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41556b9adb09e4c5de3dae99695ee5b5af0d5cb464b7ff547cc41cb5ba23066c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...