MAL-2025-162968 Malicious code in nokire-nakala17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023baa9aa32a6a1da4ed0cb5cab803d829971e2a99d9e20368078d3f7139c38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154429 Malicious code in diago-klp-kaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9e41825e677eecb5fed4a2612d1137fd600f96ac890e51436ad374286e735e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158990 Malicious code in madan-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b665f59c0407053f251d2128cb7078ce3b6b0fcd66cdfd41abefb12d6e19d00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169910 Malicious code in uinsu-losit-dabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41329b212de826f981abaaaded19af425fd927348b9118e6a87efd5cdc88f066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tdaa-ta12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545cb9a2f489cd518b41031aed29cd1f253d61409e7d7343e90bd388f71ac367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fini-savi-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fc0fcd63dec56fcc2049ab78238ce9c10765fd9709b1651485efac50ad012f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-china (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2cc69d4f0910ed7ddd48d8bd98c029dcde9aca5d41aa9fa47e98501597a8e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165419 Malicious code in sabua-muuyfau-dufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e13ce2a2fcca832570448879046ab1e61f2be0cc74c74a1de0f74a106fc529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150831 Malicious code in @miptaa02/miftahur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1ffbc885e1edbcd63a232544f5f1cd5bdf44e0d92add89a01d0d9251223150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168660 Malicious code in tealove-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0ac414d9611ce40fce89d6ae13ad3c03c5a9e62354d53cc42861eafb5d8667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151794 Malicious code in aiboa-milipe-apuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982ee7fc52975e8bce216d240e3fedf3479491f492d1de8730996ceeb9dfd2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ec6fe20fe4b4664a0bb52a355b0e992bde9ed1c97754d57ae13997852ebd8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad467dcdfe23598c5ed22c7ca4833135bffdddeaba36a5f025a80e79e81662cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157731 Malicious code in kuinsu-lubki-nasunaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e32de5a4f699834476227a63458717edd4e88296c80f33cf5e7e4496808525b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otin-afofagoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3422a3efcd8060fdda3367c60968e2e2c98f9154c8734693953642234c0784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-ras-batuba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ec8fe66e8ef41e348d44b70fcee6359d182d390d006f619aee574d2a0e1ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18fa18ca17d05a04385f45847ce0e7fba21530454be38c3ebfa5826a0ce948ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156382 Malicious code in inal-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3da1a563b6d5bdb59ebf89b44a5006ad7e1c81a26569d0db08a52b60906f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165790 Malicious code in sau-nakio-ups012uiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8df4dd479a8c0a98048ae7a9f589956c1c2effc77e1e99a33f3ba6297f8441d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156543 Malicious code in intan-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9fc38176e89a343098a74d5e44d446f0d3e0438a6daabe7f1f0991121c5d575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...