MAL-2025-164131 Malicious code in pilka-kalimaa-vubiucb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e65be34fba18898abd0406f7ee19a4887ef5a58553bc0e1462903015e8de5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166611 Malicious code in syahmuda-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccaa5fd2e1a7bb5e352f5e7dcdfff8fdd05f801496dd908754eea39a38c113df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157903 Malicious code in kupai-lulio-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3748433f2a80450f9ca7c07836a291a00d022b55366bcf7f990cd345887abb2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155200 Malicious code in fitrok-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cf76dbc9f52397c2d848d181b97fc535d10c8d73cd01e0e076ddd7eac9476d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168002 Malicious code in teagood-yakuza44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a403911492a6dd9df1dc1d2a7d6254f8050c796f7fffad9e6d06850e05ed43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166888 Malicious code in teagood-lokika25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d69fa09eb6e69aed15c39f21b4d9faafe16b25e087749eac3f98da05049ab7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd8bcce55c45303102713537500a77e3a476da087bff5c12e3302ccdd72ba21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152103 Malicious code in aji-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ba3f1ea48e40643a89ba49e0c8608cdb7c522148ec618ccddf2b74a6f32ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155505 Malicious code in gurs-abtya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51beb0cfb4d5b7432c50f9bf02c24e05c0b42e0a5f57a3c3028ee8961b42a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154562 Malicious code in dian-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4985cf64ca342f23432295e158cd31aba29d4e56843ef051e1b4ecd4eef02e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163844 Malicious code in nudla-ofog-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3607a632ddf54b34ecb68eea529365a6cc715e2c8ad2ce45d6f2314cf1cc0fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168377 Malicious code in tealove-naiman38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01e4dee6d8ea1784b971ff7fa33321ae925ba1e0410bd237a710a4612943b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153101 Malicious code in avminah-fagias-fimoaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d253d7d2fd147ebed8e00465054189cea4f6990f80679cfc76a41d4cfa626c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demdadf-sadudar-nurti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b91d9559009a5fc29c8bd7bd541fd0a2b229abf687c8e4763f98a7d9587775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-urfait-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6416f099947270d1a54611600cdfb389556cdee7ade4fc5ad70ca78630aec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toaviabpla-madoliso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1097bfa935364e00f06d2bffe1fa3a3ccd906656996048d67c4d037f09a20dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomian-daju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a016a08d7a674076314810ba64fdcfe05a13bed8ff35f86dba9cb3c3edd7604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiri-agoburai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33d4305602a768f72ec8115820b5b20a0371d06f79434df1d1937d9651a8783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kilp-akbli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc91e4aa7e3648230abc2de6870870a84e87d4d3c0c3f6e3b943b1a5ecbfbb77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tdhfla-mafgdggjhhla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e9e74b234d62afb17ac5d6047f2d12f5c85f2628634a248028755a69ba14c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...