MAL-2025-154752 Malicious code in dioaloago-kilao-akiako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0296fa2392145fd28063ca0931c010380a4fdf608b6f93796db67f185d9e388b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161748 Malicious code in namada-kasito-nuatrfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67eeffa539fb5b3ba3b114c238c9258f023dc6fecbac3bd2fadb0e0f6c9e4ee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151278 Malicious code in abiba-avi-aumauaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bf91782c282ef7f62a4acb31a5a5ceb1cadc37906ed890165d81e30840cf53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168894 Malicious code in technical-alobiko-taovilanaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89bde7de91130274e10d3a6940cd6966c30125ecd519ca57b01dc557c4951200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149929 Malicious code in @mipta1/apasihas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e16b890d767d336180cb9f6d5e182e2945a9838649f58cf763eaa0baff16905b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150515 Malicious code in @miptaa02/asab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7989e323ed7d305c696073e15ea96e8fa17ead3fc92bf1d1780e83effbb09df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161441 Malicious code in nabuf-otiganaigogaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f10b410290fcf5aa3033645aa746705f9a8945fdb689f4fe8d0991841aded79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162636 Malicious code in nokire-kilua46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f8be9610325cdd3204e0bc7796059d1d92b6f791d6086e76d527c6e0fc4c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158962 Malicious code in madan-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dcbfa7876c1a82e9a25de21ecbbb9615efe92a58bc096b9c034346fd27d702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150944 Malicious code in @miptaa02/sfdra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb88c8df811238cc626b0fcdde91065464204ab364cce3ee2453fa4233602704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb998047578fb3425a3d3ccb32196269a1d659142c0631f8d088611c5302c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/koad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4ea1e5c258bb58ec8ba4741c9a2292d912fad98b7327953bdd433248f964a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milaoa-dudio-nsastuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc521ce502d8cd92683d3124e27792831156421118f88df1279a4af6b186688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-musiop-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623c155c37006b0b95b1fc0b6d87d9599d4461f0f28bc214e060278814957173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6be57b1fe9eff229d23f0716fd00dca397bca4d38e39b4911663eca0b7ee810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a83618eb5b9bd4388f93cfdd61cb370f752b7cecc269858c06298c9156d04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fisdnissh-sf-maegwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff6e3bd084e017ceea4889a8a011b1852026176e45d61aa23e873c644b1938be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyaudtu-tauut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206225f292849743133a34d305b23bc87f87a77d7b7fc5e2c2a37875b9232251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamuli-lukakimaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae55d9069c2165801b3df1ed692360a77414eba3ca13ccf69b7b7f2adeba6e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-dfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65507dde608e7d3a41cf39581570ed9e5b79a1159f5c024089b26b81dc55ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...