MAL-2025-160492 Malicious code in miracle-dibook-ikukanuanamai1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b79ee45f486706661d52160c3d38a2a2a66c21985e24b53f8e25aa8a355bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160162 Malicious code in masako-males-nurs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61c7a02e88985dccb422b986925375aff9a99cb4d55da57ec5331042c0d86ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167158 Malicious code in teagood-manaki89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f673b5edcf26fa1fd4a00551a6199d8e70775a9dad7f9837a9e9e052b2d6aa09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151641 Malicious code in abuylbani-nikubamia-luyahuamubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac228ed39baeff7605f6d9b0aa145bb4b00b23b3f461c857e1825b72d0ca6a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164863 Malicious code in rinto-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d3d9e232832c998955c5e0d159c7de22723c4337a9631cd691c3f246784720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151699 Malicious code in aciaiaggu-idat-gda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e79276f387ce9e76ebd72bbefede4fcb12d98c4251473c647aeb02dae0857a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6baafae6103b4d52636c20e9056676fa2b0051f41794b09ed1793be325776a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupa-lubizfzlio-igugfsdsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe4322d941fe2b2ddc929cd42654fdf1bb8e808054737059de8ca7fbdd74a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiraifiagne-asiaifhafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34099b2b7e897a7f3ba2c5b52e0e5f3b4d0141d54dbdec47a74d444dcfc425af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubilio-igusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb06cfb6697399ed887f7d50302fe4ef23786d964e116254bfb70a2e452a383a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rusia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0882086a89e1ff6987fc1622a860e0bbfc15eeb0e183bd90fac7a9cd6f3da216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159566 Malicious code in manapf-manta-nutria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b57038d0599e7fd2dc2624fadcaa0d1d6f66d0b3ea1b2138f9953ef79d7ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169295 Malicious code in trevora-cir95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018fe1fca67ad46e17994a5afb53e211c0b38c3a3ca909b857925e2f1e0e7b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153445 Malicious code in avminh-afogofaafi-faug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce10b7b76fec88908ca00a71ff6710048b4b0fe1226e0872688b8e274db9902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andriani-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70532487070f2a0deee8b4bbc1c74cc67b053870890a96f56fc6f6daf60b7e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166031 Malicious code in slamet-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d1f383ca57328374d755ff5a85b4c0e7f895ef7f5ad0c54b2cb7687223063c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153794 Malicious code in bintang-tea44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557c10ae595e7679943799aea7b48b3a55248c02be7a13ed3bb885a26c4d9493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153284 Malicious code in avminh-afaais-fbigufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a40e734ff1f0dfe48ac59232389ff6dd351499550ae85c1fcb90e70b6bee00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150201 Malicious code in @mipta1/safd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cf6f6f565d607e067ebb0d5c4c989db7544f80af61160fc38c2c3e4bc482d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165860 Malicious code in shilang-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ceedce2b51dd23f28b005a7465762979944892a76b460e11b7bf1e4b3c0ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...