MAL-2025-153748 Malicious code in billa-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0d675cf028c9ccf7cdae811ddbc0cb5964a9917768cce14869691c63984109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168899 Malicious code in technical-alonbio-tol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1455a9d90c68aa8aec34c7b76c8bdb8c9b0f088964c1d8ccb619a0fecd14b169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150906 Malicious code in @miptaa02/rea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70a765eabedcfd0fd6bb789279e89d4d17e262f23d33524fb68ddec2ebd513f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154812 Malicious code in ewa-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ab74cb33678fd7c193813b112c68ea5812bded85ea1a07e9d325bfa4afc3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163543 Malicious code in nokire-zabuza52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adad3fa2f33a028abc3181d7e92af7eb512235251ae33debc624453ad6d3de5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167279 Malicious code in teagood-nakamala17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08271ac64e7de0babe16e4e0aaa31f74a7b70e58967180f4a7224710c2a33977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161718 Malicious code in nacho-bunian-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08deafd3bdbddbf5ce5f5cbc28be6529ef6252661c07dfa1c1742192a4272f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166194 Malicious code in suharta-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3cb688e2f271cf9a97e0d8e625f1a61726a28115aaf1e45a9a5c08ebf742c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150379 Malicious code in @mipta19/gupusr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2f12e176a31c9808dc051dfbb50e93f704d4bf0930207677cfa064951d1881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luzmu-kinugijani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2530636c4ea4911010adfa02c2528ef1310e5e9706b5d148eba38e7cfc7739f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vumaf-nagafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795d3057af2228ac9e20ad7f5b50d5eeb58716e75966f13009634b02024bfcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lot-babiunaam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddaad05ea6b1e2eaf3bf034ddc2f59524daa038b0085cab1a2a7278d386462d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f784ee1b133e3b1d8c245d2669a84763287824ac97083ea7a043615c8ce0823a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/axzxody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a655713e047e0aa88a53356cf02c1ac838417e0d9736ca0fd7fc4eb7d4be223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152316 Malicious code in alita-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8d7abf27768eb08813704f15d485c648ec027b4c35c7fade49e04febcc658d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156223 Malicious code in ilang-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f44b92dce7c17c872740fe46dd7f947b2c0d2e02df8070132749d22e159e8efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158602 Malicious code in lookingan-namakiki87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ed0e67855e2a4f42cafe9009d28709c10e26176eca131f63e48c63860e7109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162030 Malicious code in nasution-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d177143bc87612b026674f9eaa47010373ede73e1d6c1502ef1c443cc69478ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150604 Malicious code in @miptaa02/fabg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb9b4d9cd8a65730c7279dffd47441a4b346e36491554593926af84d94e1ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161469 Malicious code in nabuf-otimmn-pigfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1baa0425709c4d047df6a80cd2dc20689b7ba60f94043f82625ca31eca2702d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...