MAL-2025-157405 Malicious code in kapafovgfiagangaao-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f55c6dc39da7a9adf7923bf743e59162e00fcbdfede0cee30dbc4d4d2762ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164066 Malicious code in parwo-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c6805988026a3042b794533d8c5aff9e777a6b3bb372fb3fa32f87e4813955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169832 Malicious code in uinsu-lisa-atukbamunima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed07c14e4a2cb871dbbf19e61f5b27da884753255ea51561e809f506332444b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165776 Malicious code in sau-naki-ups (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37de7b4aab5f708d708d9aac7f78683f5b029e31302c090cce78bedb1bf196bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160559 Malicious code in miracle-dokoi-uiaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995a181f1252cabf498ccbc9171fffecb784a300be90cb53e805c5f377d6f385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167790 Malicious code in teagood-sukuna37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c063c0e24cb7e708245f6768ee4df824d33781d109abb940b63187cfa458eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169726 Malicious code in uinsnu-lotaihzmi-klsimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e1398b238a51b2fa04ebd74e9259b5a36e8b2e57fc60fecb7428d498b2bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157959 Malicious code in lala-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795ea002cfa6c7d0917a1406a2bb9e7f1364b759e8b431ad0a5dd36af04d47e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafagarug-midefafi-fatusut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f7be98063fa205aa4f0d4868c085fc993e7a85ce2e25352c24397cd4fbbae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76a75d61122c95a9bb30976478f603fa10c130d453b5188996c2b14a54b507d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80782bb800a2d3538e531f017f164a8153f517e0d35c9ee1ed8947028fad2af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170140 Malicious code in upilka-luzikumub-iluanoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fb79856b584a4a449fbccac0a87dda369ea91cd8fc5b03b4b08449099e465f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150417 Malicious code in @mipta19/rykdie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce783c17d272e0f3d578e49323b11f679f5ed48c164281c68b1beff96b481e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-nai-iyulaip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 798a4f71baa071becea1ec947c31bed4ba79a73ce17fa101ac668c495c738acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-klp-kabkuloima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59cabfb86938e813fe38b8745e8c72aef2fd66326fd954f78e1306b20e97dec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a7c49b8fcadaaa06d17d6ac1b1086ea67ed51e5c198187ff8e8ec1a914e4202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojauggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f6d7759a088ee8fecd9cdf283cf3b40c04aad2092395049328e9c9685ce531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b417bdfb1c248a29920845b64012882ec0e6688dcc489a4ce9e4f3dc883f2e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aigoamoa-iutamafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc98a54418ebe76893588dac4f4451c37d94c60e17ff8b9dfe4b0c019647739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/aj1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8942cb334b11c7dac42eb0c0bb8eafe55a68f3c40f20dc06cab87b1fd6270126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...