MAL-2025-151358 Malicious code in abina-amoavugoi-anunhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 402c6f652a57d55f04f2ceba119e4065cccdeefebad7164329842196d6edd8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164877 Malicious code in riomda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a128a1e9e9661bf5fe13b12740eeac904f8fea27a9662663aa47b463d22a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161057 Malicious code in musnisdr-terd-naud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a8fc1321606a8e93bf40d7f76ab493d4e49d644a0a3c7aad45b278e4aeadcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150515 Malicious code in @miptaa02/asab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7989e323ed7d305c696073e15ea96e8fa17ead3fc92bf1d1780e83effbb09df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151996 Malicious code in air-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e681304b3664835e8a2e56ed0cecf6bf36dfbe6b548832a9640963319b9e74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157759 Malicious code in kuinsu-luki-nasunabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 011459851e40d3615a05f07e410a8406f3e3954be6a65d1566d2f66cc03cf366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162636 Malicious code in nokire-kilua46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f8be9610325cdd3204e0bc7796059d1d92b6f791d6086e76d527c6e0fc4c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162094 Malicious code in nokiraifiagne-asai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a75e3bb26905e6344c820d51fa28b0083f3326ff8af82b74950bb0b862303c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158678 Malicious code in lookingan-namakita65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bdb5111e65fa99d697feb6bc9ffb22b86126cffe7747f08dfd63b1f1b00d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166401 Malicious code in sunderla-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7948a39224bd86db5687ca4e8fb63b92ca79baacd9977bca0bf3d8a3e5c9e4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/koad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4ea1e5c258bb58ec8ba4741c9a2292d912fad98b7327953bdd433248f964a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoiki-nisnutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ec6c860b856ef9058ec41b97cfba56f784f93cd0f9bfc285bac5f9396c27ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df6b1f4e075542d19b35e1c57292ebc4de9d6cbb398bd0c7603893a5305e2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 196bc451509a8c10bcf06239078aa95d9dbd76ed2817b09d704a5d1e7fb1a890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sauesdpf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf3b598024b30eeaf8cadd303498f3cff6a35eac77395f7d7b568d5cebca3c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/aisai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6737cab70acc08bf0709989819532f14add8dae735de71577ffc40112918297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/relsazy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896f25c183ecf3742cae4986da7bd180e37bf4b3c826df1a59fd52d0c6822125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cara-bunsn-jsaunso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1aabf9653af1a45d6344d09f5a60b20fd2ea5cc51be1bdd5878f07206d2763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-numeral-tonight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b92ba03ccbc31eaf010ff3f8a513bc375f742cfbe0d721bb535dcdfac7ced46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a83618eb5b9bd4388f93cfdd61cb370f752b7cecc269858c06298c9156d04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...