MAL-2025-181970 Malicious code in flights-lutag-obolavuhaduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287c45c748bf11a549c6361ae5c2996f822777042af00c5f93d49dc66ac3e7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184035 Malicious code in mitoko-ontcami-lamokoina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745f4f8e0841b9ece9530aca36763c3c2d14433705b2cfdfc02dffeaea0b8fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173432 Malicious code in buta-fipana-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ce31cb3ef613587728b2c43054723ddd59af102db1642759e87569f2e37c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157461 Malicious code in kapvino-si-fagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9cfd7558b0f2e613467ffec57539b1fcedefb8b02d4028fb662020b7beb022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54ccbad0f9ca27fc01f1318c5c6efa06a135fbbc491824c9735975bee4ea506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169174 Malicious code in trevora-cir120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a9a561dc3ebd6c2ba3776182e09fc8622d522079e4035162c833f71877420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155768 Malicious code in hariyono-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59161311043b8ee9e7f7fcd8ec2e96929ede59a77c50af9e1b9f6613047cb0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134177 Malicious code in hissing_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c5a0c7bafeb0c64a43c2f09d50a915f0a4d931ac4cc00dc32fd648e49ed72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devoted_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7270ab468a2242eb8bb1e8679a329c5b70b37f47a9915c256b258dbfba2927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132818 Malicious code in dian-lodeh6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 355ba5d5993d6bbd6f0ded589b72ee491eec9e6a862ce38664e94c6658de8cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134807 Malicious code in kiki-lengko10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c691249a6baf6b23b17951bdfc7110bce2284eafd367dfb8d422b8468280906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-sasag90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8ac6c096fe62379b7e5167e6741541d7f02dbb6490c327d4dffa05b55f8917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120846 Malicious code in irma-gudeg20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ff4d20eb10cba5ed2fcf8002d0da50471b8055dc57a36877f8f0dd673f61b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121405 Malicious code in laila-kembang57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab0a292a49fcc9ab9ae2c781addc85d9576e1791900ec4c7f56e408b3cef7fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116588 Malicious code in putri-sambalado88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975cd59443c5ebf91602b655c7029f912ad753966a980e06790f7d267425818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-kue47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aeb8f6ffd2de026a0a28aa473b971e277e382004db258db2e3eb97bba92dddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88007 Malicious code in lucky_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b640549589eaf89378fffa012d705006ba14fe209ac75159c279d821177a26ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83757 Malicious code in budi-rawon71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3181364fc73e1486b795b8e134ef7daa3a8136c0b439023303aea649dc62ae17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-asinan17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ca89f56e50f560cea28736ee3bd31e7332970add580f637a6a6fd50d571f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85340 Malicious code in fadhil-kue1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38878ba5a0b9f7154c77b9b16a1e409639341506c101976cd5045d2624d7096b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...