MAL-2025-154287 Malicious code in demdadf-sadudar-nurti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b91d9559009a5fc29c8bd7bd541fd0a2b229abf687c8e4763f98a7d9587775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164517 Malicious code in prayoga-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4506dc5d533fe33ea265fc675205b332b2adac8ce06dba712230dc653fb0719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiaala-magollaaklani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cabbacb9bd3ad5a351e8508b76ccbf3d316d5f3302b4b3c03ba92dbac92ead15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2699128b2f19b0f0307cd472b3a0edeee614000aee0d2cf1bf18e7e19fd3344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutsai-asaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729f18d78cef3d5c49d6ddcaa27cfebd9a0a2126a4a67bf203cad4499668d261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158070 Malicious code in layla-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff788d1041f716ccda64c5d4fdbb35383f18d46ccb54be00c6a7e975c69f8a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156789 Malicious code in iomodra-forufai-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcba99a57075217a17ce97b2d94d88bc9aefa3e4f93fcee820d27848c094023e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154613 Malicious code in dian-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7e4414cbe9a38e35a2c829b698a01c6438109e1ac1235cf85ca7e627730352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153000 Malicious code in auyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e90d23f5bbbf7df834aa109a4660c5d2bde19e821253cc869e49d3f62437ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170077 Malicious code in uinsu-technls-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae25dc3dafd43faf35eeb608ed9bedfb3cb70618bcb34118ab614e7a3927a1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151035 Malicious code in @miptaa02/wqdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba41c27cb4542fa058283ba84363723f7a57cc6c80a7be1426b3d1419702061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19207635e48c0996f6d61ffc8732a28224cd8b39b08f44e8d0bdd184b1913336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91c0f3e3f1a9a3f614eadc1f2c281101c150afb9a75f298cbef921633f1b9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154961 Malicious code in fadila-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5e1adc0b91d83cd019f1e8fced30bc4eb617a065a88db4f0e4edfac62ef786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-mhnal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe2a5c697bdcbca1d5a2cda9fe4bfba26612659dfbcd1fadce9d3abe655c005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tob-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e3531e625c4a46b4f0d924906fcc2d8ef5c257bb8cba2b2419e67bef21402e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kil-akiualabannuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c94489da2df0b0c3942e44b539b452e32d00b2abc862fcb8393cbcd4d32d8a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirane-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bfbcbf6ff0c7e5c7e5922407e8891fe4812ee2030e6cb0d762405f85897da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecafe47b5a373885b23cde10d517778a0de3f74ace5b8d76f919147d8ac3d522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69021c08c7d007c1bdcdf0a3a82e34dbacd1f3487089fddf5f1fd75e1c080f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...