MAL-2025-152598 Malicious code in anaisila-pafoolai-asigoga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a78197264ba8947b36c7338814d681970277e26a0b43fdbb80357140405c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161886 Malicious code in nasrul-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab8561180679f0d6788199b4c2bae721b0e84bf0d40132716b84027bfadb71e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156483 Malicious code in inal-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3095d3a02a7d5c63604dd3b5d487e12218251cf3e00110dc96d25965178a237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-gagafhf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1b58194594a1f8ede0552ad50246e0c4c1095e322e17ce1d055843c1434155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156769 Malicious code in iomodra-fofiori-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1c154a8cdb156e08482ccf45f70f29e16636fe41a887af0087fb64da1aa6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df3aff8049a78db708afe7b1880ba114f8f668ce2b2716b8daa8f994f0bfc2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159630 Malicious code in manda-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c67fbe7a4f8b638084e2af409bab3d7f493f61d9b604d3158517d7514d27c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alabki-mojikaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a12756b909e73efd2021f1a4fa45278569bb7ec03c6c5522a1e4723667c1ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gobagilai-januqigaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fe015da928579d9e628c4e58eba56a3a2856b86adbebeb35d2303188bd9ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salabunli-nalikabuia-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84a6cf6c911e932535801ef783a6e25f20c40e67800fd79fb657ad29a1fa928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158750 Malicious code in lookingan-namala39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e9655a8b89768c6a36d3eb3c7566a41abb0008f503ae7b5dff3d734058a013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idut-dafahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaa220270cc1414bf0f3664d9f9030a8ea4882a025d00f3b32283eedf86bc73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153c67275750824a26b85661d1658b500f7713eee0bd9249c67691997d0cb48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167637 Malicious code in teagood-nalikoli79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 613bfac5c57620f365cda538262b7f06581c36d5b06cd9c10b2a1e803b0d1a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152782 Malicious code in arif-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483c23e61665194ddcfb9305d85941af9797001e7d16c11e5e74945a296ef02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-vamikam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d819e9d5dd696781aee358d11e893f9a92ae6c6d58634c6a49e137e322560415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151043 Malicious code in @miptaa02/xffhd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7612012839b9a3a3266453e94382192a76c644bfc463c14b18c72f7a20e0affd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kwghj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b679bff98e1b2918b0b075f4d3ffafe37c2f1d74f18c9feabf02281094370bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169991 Malicious code in uinsu-lotaihmi-klsmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3b5a697e7808f2ca1e32b578029634265ffada5762e8361d2863b60589d558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160039 Malicious code in manurung-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90324f21129316c2a3bef6d366e01462875628a3a5fe0842d5d65319b25bb075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...