MAL-2025-155322 Malicious code in gifa-otau-umo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d967898c499a56420cef668d5d4ea3d311659b6ccc0b3fe2ae3b20ff64f38ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magfu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 848e128b64b8d98691ddbabf480fe4bc4644bd2f86b376be002d0dc8d1fbf537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165781 Malicious code in sau-naki-upsidaluae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d79480f084ea2c15a5dce3df851713e6980ca092dbc95d9f671891f0a8ec29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152306 Malicious code in alfiansyah-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6984958ced6eefa10e4b8c81ce7f53be6e473228462b360b616216a49582941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154632 Malicious code in dian-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cbbfb96f3573bcce2879e6053e74d8d9eed441e9e08415e82a1c8345bbc92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150925 Malicious code in @miptaa02/rusem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0d73ec9a30bbefd994379da9cea59e499532442c7e150d3b61b51cd5b1d4f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168789 Malicious code in tealoveness6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9b2a8474e6a6bc03d67ff86101ba642436401e2fccf31fdbf5dd6886124200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167870 Malicious code in teagood-yakuna14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a847936f560ef58748b9ec9c6420ad8e741cc5952f0df4da8e1eb735ba8b481a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156316 Malicious code in inagi-gvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8dfaa9e13485562114eee2d3f153bec3bb4b3814012c3aad88ab9932267df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nati-ylara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc78f645af1c5ac0f28d14021662e1c9d44a3ede40ad2234ef1e4ac20ba015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02e7181f49688160802cf116f9c70affd7a2e45af2704355f4c4936c2466eedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2c4b320fd4dbbe85693c85774539e055a684466d1aded78579ac129b4fa33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a324c7a727e15526dcefcae8f9fe7915f6c353d3f39b9778c5cb466e149ccc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogaf-doifgako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a9195da5a38e009ff929f3544127c1009b4f1928ed40133544e30a0649b5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df27176e4154205d48707cf6d9102323d3f4797067042ba5a1d96f7f9092c14b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/etaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456faf6455c0cf8c25856679c212966ba8f647d4df9e459649f1cf0a9b2ea23c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155283 Malicious code in gifa-ot-uofipfuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95125abfba8f224e1c742d4869e0129aa826de52d8a84e23f681689333ec4d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e32fe67d1eda7d6d0872b0b7c6ae0395c83719e0651bf7438c0860ac1b8902f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sdrra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144c231912e9273af7f818855c15370395ccb19217c0abe708367cddb66362f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-alufuai-ayuvba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea71c663ae1db1ec079c51a3597b98bee6543535c9c87e3a1276318dba93d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...