MAL-2025-169760 Malicious code in uinsnu-lotimi-klu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a6c2c3048fed586dbe4b8e2aefb5cbc4f9145deb32f4924b4b8331e65122cc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163759 Malicious code in nudela-fofgaf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 149d11d07cb42c44c68724b356625f894e19c1785420c8ad147d4d9b5d351132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150782 Malicious code in @miptaa02/jzdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74751c07619ab82b88e50f90eb7a863f0a46b54d44127a3eb9f04acc197229e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155826 Malicious code in huda-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242dbaff5902db0aa57180d1ec61710eb9074cbc4103fee0d1d486f24d41e0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169944 Malicious code in uinsu-lost-diuns (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955ade9abb50c25b621c9958b9bd11965302cad37bd965035daaa1a144f50b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160771 Malicious code in muda-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6b527fb73443f16161b7481900aae55372d8d4ed1e111d88fb5daa28b00437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163326 Malicious code in nokire-rara38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9e76623d9ca4cf96504b43eb22328d65350b2c5a97d68917b2abda9378ca8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167228 Malicious code in teagood-nakama61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc90200b13d1f436d2dd14bad43bdc8d403fc1ecdc4f1f1d0b0dba893e2d79a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163976 Malicious code in parwo-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9281938a6e517336712d7af1e705009c67dc3664540b5623fa8599cf334f646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167471 Malicious code in teagood-nalikami69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dbe643f71e1759ae0678e41f5ac800c61f8048d8221c85c1b45aff3fd34861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155792 Malicious code in huda-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4734c7b9ea6c4a8cb56bb2f1b4d2a4da62953ce9c087d9267997e719752b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169097 Malicious code in tehnah-managagah-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6735e7dced35ca995339cf32996ac640ba2a0889acefb095a9a1a35f033739e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169494 Malicious code in uaragifa-aat-usafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d373baad5dd18485b8204709acaf2cbc8be028df0cdd14f8823d4afd264f1fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160931 Malicious code in munir-teaars-terb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0713a00eafb9c794ac6b1c030b88558371c2d13aa6666ca67ea03fd3ae2613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6881f559ec0d21150806151bf41d27a9f6e624ee0b1b23136f76af606d7351c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kunuasilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbae37e5285bc2dd976055fbdd028ce1d4d78f46f9f357e987549d7ff5afe3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4217b23a6c694366936386714264175fd48276abe40569b9dc64a0013b717188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-goiaag0aim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afc1c7ce2624633c01d0377925efe9f9a7780cf0f6505f3bee1deaf85023a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kipi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4d087d53666f35d989e7c90e4577765f8f197d11bce14e2ee1787a07c7d936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c97d266c860433a4de42b0f1ccc1470da00bacd6754fd28c155f8ae0db5ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...