MAL-2025-156506 Malicious code in infi-gfobai-jigtaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dced38107b6d45f3e075ac789a2196114453991b0a23c8c83c52046d7f123631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159736 Malicious code in mansia-taviula-madoliso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9236ee24233468ba42b747de65c076914768b82941459ae252b5e0485b5fa8be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152491 Malicious code in alvira-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0d912ae87e34625a51eb6dc41caa62cc667afbda7bdc528ec80a8b51481a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156220 Malicious code in ilang-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f315f0f8a42662389148954718547626318a2ca0a76df6f528a0423fa19ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155977 Malicious code in ican-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4657f82e2bdc28b1c435f9e56fa85d2e4513e59578d2910bb1d5bba4a3048bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151989 Malicious code in aibuna-mobiuple-amakora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1b35deca1f30e9b278b05b52b1c7c7e182dc735b3ea3ef967cbd4f16980a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165278 Malicious code in ruji-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55fbcee6886c357ed9345d861434babe69ec1b5d23a4456d4e1c1e194bb73df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166207 Malicious code in suharta-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae77fe4ef115a3f5df83b54564c5516584c41bd42e440ec4ba3298091c31652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159627 Malicious code in manda-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a3421d4bd6082fce6102f5a7392a7b576261d17d979205f5f90cb8316f24d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151235 Malicious code in abiba-alufuai-ayuba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39466c6343d5e0e29c012e91c433337f69c5d796f02230e0318a908f1a62fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kilp-akiualabnanuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ebf2b1ddadc0d13295d5b1825733d595b589c9d69139b1e3669f24dcf58b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-murs-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d1bb2cb05d974d6410d75b7dbe85b9c04135516d1f868d6f9d33c6de86ea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-upuasonio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242974d33d9a6b8e10634db9b520bb059abc531b36bc8efe83b6a48ab4c96731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c631ce6a5c9cf93bb37f95e4a7633eaaa70a3ed088dde5c0b82979af0c0a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sgsgdst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73218226ecbc296cb30d253d85a3e9b7f92ba444b4216a4ac82e3f49662ada3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyada-dai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645eb31a113541fa381558c97c5f90324ff03444b6e1e211282dc9b0a21ca503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kipi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4d087d53666f35d989e7c90e4577765f8f197d11bce14e2ee1787a07c7d936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617ae6725887bc888631787398853e3820178795df6dd1d98035803ae61d3fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e91af096703e99e17d637ffa894faf12963a6af26a60717254b8faf001ccad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdf0833e813e16d6b8ff5d2ae675299b748a235a6e4a4c9a7fba7a4d171e09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...