MAL-2025-164906 Malicious code in rita-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef3d4d6b9e4e9ea19cb884050adfc3aa2516f5a24ee26bc89c3b0c1cb893e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164069 Malicious code in parwo-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4da0e380ee08f570b8c8448442c68e759df7414e04f1bc20053e240b323d489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157345 Malicious code in kamasada-nutafasai-aadsaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233c21a15980c85ff003f609d999f8ff3b3fd1353dee839e4408b8712ec4a72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163797 Malicious code in nudela-ofgaf-gafjhsaaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daab039581100156c0107ed04ee2fa17a9a89e12cb04c6d18f90a94b65fd40b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158976 Malicious code in madan-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf1b6815c37f7301fa6ed6521d2e4283bbd35242a39790e7219e14001fd402a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159168 Malicious code in makaimaigan-aniga-uag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7186d1dcf40ae9b3cc335a2258ce71dbdc428e78ab34239847fedd78da49da56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162097 Malicious code in nokiraifiagne-asaifai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a33ff9ff55e7e0eac4e8c4038d21db2c058739f916fd72325381996f148c65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167103 Malicious code in teagood-manaki38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336a47b0039602962610a5afed60208496d9999133eb1661baad0cb976189fa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158002 Malicious code in layla-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1b842d411ad913cc8d0f18689eea52b03102f3aa1be56b6728d62dc58f0bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/gffgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5054eacd8b47e700d1a0c2d248fa03bf74c3491252a45289cc9c275170723b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/gqa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fdea1cb25b3477dfd8f78a44abfe9c67c1dbedded2d2e64ff13e0cd8755482b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-karyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a92b77e5a0def7a8dd8f0d352a50f97087dc670445f31785725b64c60bbb069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nibli-luykia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361ff9200868993552cdffe65c46dd1d6d840e5151c010be2c6eae205cb620da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sfga-trud-sfhjk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4369bade9bca95a1b65f2ce2ab8dde3034543db73008866c8f03d278d0200dcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a75c83c3612973dccefb90c21e944de2cc43e6c5a4453eaf38107ab3d35b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71c9c23bb7ae2b18dae40a17a6944dec00f74a8019735d4458f84867e42e1df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toaviabpla-madolioibsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a491ddfc0e6eed0c18bb05873104482333b4ab1ac87b11d8da0ab6c747a1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9425dd61803d51ef737d6fc9fd2f1cb385c535a22b661c57113d2dac75db1742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1bd90f39b3cea9a752333f705a8bfbb3cddda6d884712bf53c4594a939f8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a15be898ca017c559255acd0921290cf7b3c9aa7144a6d2f79869ff1329660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...