MAL-2025-157925 Malicious code in kuroichi12-nails-attached (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08128121050e68bb69fac366b9770bd259fb0be9a2bcb291be48b2ddf7517136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150591 Malicious code in @miptaa02/eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020bd97a63c063caf039c40b737ace2bbbbc697be551da4e87c6bfd217b56009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159671 Malicious code in mans-manapa-nud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4ee85b750fa0cf2da26914c6b4271d6f410fc1a7c458c1a01cdfdb9c73feaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152563 Malicious code in alvito-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4402fc920da45dca32a37c3d2a8c02cb8390fd18cd02c765b1760b932971b6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154383 Malicious code in diago-kamoi-liumakuakoimho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dccf03eac50e2541342e9b40d60c87fd593ec2dbfb729504793637991448b2a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162828 Malicious code in nokire-lokcek70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0821f980b488917bffc52d7be4a9902a24fa7a361ef1734299d46aac733f4131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154790 Malicious code in ewa-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2a301fcec12c2bfd5a73d73fc13d3d4737e3bd242dd9320e629107dae5fc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160582 Malicious code in modira-fuhopia-janisu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c6754bae8eb3340c250d714c7f15bcc0843b6cc2a6b5d983120da62bb93bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156694 Malicious code in inufgi-gotmua-anzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf6e170c65b471e463fa9aa7411946b063c58c346244153df9b522d2a2e4b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150570 Malicious code in @miptaa02/diun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be556116e6eff44c31ec222847f3873b0fd1f888b981898490d13eebd3e1ab23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169450 Malicious code in uafagarug-muafie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5685e25958a64b403a6e4f6ff6bb662081a710dcff4f232d73d52269ceb5f9ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155179 Malicious code in fitrok-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdcfe24f56c77b7003ab45081a39b5928aa7f0899bc6f31ead2e0fcd0d7665db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163458 Malicious code in nokire-sekiya66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422024daaab2f12f5b7af3ad687902df201a5792b53ef0affa88c4a7b176c1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151176 Malicious code in aben-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d701e0fd1104618dd98e02b2af639b11429133e142e5a7a3fbf6e56b4754dd24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167770 Malicious code in teagood-sukuna18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb4b53fab3b562b9ef6b2c4bf47cb7c233723c5dd879d4b591db2251d82868e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-sufaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1f80dbd2561377e44cad25da093dfcc078f5c0212596ca29d19e09f474af25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugi-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b00b2dc27ea8eb101e5027453fb76c3e6f767f8e5fb9449bbf6832cce4f633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6881f559ec0d21150806151bf41d27a9f6e624ee0b1b23136f76af606d7351c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160ebaeadeefed821e9fd58e6f650e6ec3a74096a53fb641d45b88c6c1da733e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudafsituhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96459c83c4c0f78a52ea77147ae2f74ea40b288a6c7cf3fada0f1251eeb2a8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...