MAL-2025-183369 Malicious code in lobac-ub-afdmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df039242bf00b857e00532f538c3c5b4ecd6fd4b13bdbe2637923a1198d30467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaka-jokiohakaasikimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd998d55bd6d31420190386cdb78638a50d3afc8d592f33ac165fbc8650534e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176763 Malicious code in nuilva-daerde-oaalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a58f4313ea308ae524749c7fc45e88150d5395fd9ed1a99426d370a1548247b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149932 Malicious code in @mipta1/arus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ee02d677e7a31c4559d48f86dacd9bd4f16a1e1101f54f6be5e7b23dd56343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169714 Malicious code in uinsnu-lkumi-kunal1aniakab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d4dd5db230c0bb551dc1b145490cab95de06f3e124121fdd7c21cb0024a0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169433 Malicious code in uafagarug-midafoi-sut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068a49e6cdf3c1c2b1fb9036205f32ffa3a7a2043064b7ec3d14804e1dfa0655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-buburayam65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce075fe0bda8a4ffd3f694d54565ec07d48294f3a07a5e16bea05cf0556146e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-jus44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996cc4393e9baada88d9b2250127c7bbc969d457c05568ba37395e49888bde85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115107 Malicious code in joni-kupang32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59562c236f7680a7a9b62d83242c3c54df1b6fd74761790a4a970b84aa8b82b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109206 Malicious code in strong_mosquito_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701576ac0a9ab907d3fb220bbb1b5109889e97b19a9a575d3938ee19df229ae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7906fa7aba586e5b71f7368809243040b3af2288b46149bb0daf3f4307fdc140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-rendang92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 137bfd3836596fd12720379b403a8a377f715e87ed1e84c43c5d94d5ea37cd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-ongol-ongol7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8d2d2b099b119566b629e87af82bb526f067992b9d43f2e789931e820a1628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...