MAL-2025-156685 Malicious code in inufgi-gotmafa-anamufozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2962dcf3fce32051f68d174c4ae17c790ac440921b2c146af58815b9b7a8cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd9385283beb224ca5c2ac308def000c74bb3ce230be7588812f5c2b91e9d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff788d1041f716ccda64c5d4fdbb35383f18d46ccb54be00c6a7e975c69f8a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 476444cdd5a63ec92769bd6ba2eefd9070ee1c7728174e1f0c2e1d83af63420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ytuax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239347468daf594e6441cb71b3043b5dacbc7ae17a79972fdff8a6f068ecd78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0d35076ac7bcad8a0e3f651ddf2fea4c234aa70577c3c4fffd071bd241b56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155052 Malicious code in fauzi-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a4c5fda288a42df270c080d32a1b0c5f8356cfe149fabf94dc45f338a874f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150246 Malicious code in @mipta1/sisup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c075f880e9197ec3dbccc352101aece7fb7f49812a1c9396bf7539b3d38632e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164655 Malicious code in rino-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bc5b815b9047def3824cfac976bdd45eeed244835a392aa6c32b4e1e933c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161051 Malicious code in musnisdr-terd-fhfh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05efef22b8a1c68872202a477de50f7ba431ca156d3b7a0215e35163ff742e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157053 Malicious code in jelek-rasisme-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f49b7c7919ccd4c635e6162aef746a5d90ae775905b6a242dec623b11dcbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167791 Malicious code in teagood-sukuna38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41bcd7948280916b16ed247e066f5729feafcffa521b0c1469f45f5fdced42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159281 Malicious code in man-nonatai-agami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f30cd02920b034257f693df1230ae45db72f35dfcb2816e7465f8f4512cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150829 Malicious code in @miptaa02/mifas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983837a58f4fd9aac1d948c3588b577cee7a74ac4761a6dc0dd4d76f9d7084fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157302 Malicious code in kamasada-nuati-vebasda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d94af09cb62b214e36342541817b8ff6dc34a887bce9f953da5abacedc4c4820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151258 Malicious code in abiba-avbai-abunahbia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37262fe7904c9abd8e24dbb1520c6d28addfaca21f5897399078de93ad7b460d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164095 Malicious code in pilau-akaviu-kiona (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bd653094d05a4090907ac350c8e30e21a046b40524eda3ca3c0fed76ab039f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151904 Malicious code in aiboa-molpie-ariai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ba016533e6934a5c0d4e5be67782be8d92e377eb240fe481e84e4643e1ff5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f9b2f2abeadcba20b4f7bfce5779f782a3c93020b2c7614da60db68ce763e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3de7f552b85924b5c9ac290213ffe1560926c32a8b9ca9d6da96b4152dd6652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...