MAL-2025-159790 Malicious code in mansila-tfla-magali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6b5a11cba0ecd3b89680452d55f7f7e4df8754c89d353aa5108324b5ec8100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156787 Malicious code in iomodra-foruai-unaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dbcb65007e17fc8845fd5020d17ae1a2d0a1aff9536b9eae834d1b4c0a5f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048b1056acf2eef980c215540e182efe1fbaaa9ab6732ec4fa1b584517d6d0d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274ef0cc6614f14d93608b2ea2bd39c4a868d069b5c5d9a1ae7fca26f43216cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162173 Malicious code in nokire-abimanyu58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307960a68aeb951fb3662d76343f82a95590e28d03356b9032e8a05e286fb388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163251 Malicious code in nokire-nana92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3e261314f9934973c70ab67c8f8be8efcdfe9f3dcd2f36a503ace452f6d51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152570 Malicious code in alvito-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cce5b61f7dcae6afbf26b863524ec329884e9c322de3fb9ea4237edea0b680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demdadf-sadudar-nurti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b91d9559009a5fc29c8bd7bd541fd0a2b229abf687c8e4763f98a7d9587775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-forufai-agoauapai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6892801a799d764bc2ff5ad8a41b86e30bed3e9922bfc6535c9ab72af642a63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80da16f6a8097296fbd8220b1f581a7d032d14110421e0e591ad3e88db563834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-asdsf-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7404a08f60376ffb276060ed6ba1a343cb7367cdb3e609a1c3ceeb07319a398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3b25afdc5ed101842ed865ab9a74cd6415aec01a8c205cc3e4408bf2b565f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67f76d6b95ad826db85dc9c1da35a88b242a2e09e150278d60bca47545aa800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165918 Malicious code in shilang-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8b8463d1e62de5b5aa515ad42550397b74b15d8843509d93174aff9b132141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159359 Malicious code in manadi-scisor-darmana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94439b498db3202b86e6d066c44c8e48129c22fa07c88dab0c9faa93e88c4220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159763 Malicious code in mansila-iala-maonlauai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854da5a9e878bf7fe0746a79860aa1ba3e9d1e5cd6c91035a2bcf210dcab29bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169932 Malicious code in uinsu-lost-daunaiku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806a57dc4d40d4efc60c156eb9893a3fccdef2fc1ba521926ad69bcff027ea64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154177 Malicious code in dajouka-fass-ssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d9d15ccb31a73e4aaa4e96d35d1ef92f9e284b77ff3a124a73d151353be030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169223 Malicious code in trevora-cir3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bdd6c6aa977528d7278798336822ebd940adc4df13fb17cb3fb4e1f548cbd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165123 Malicious code in riyanto-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3a8c488566dea543440f631f560d6f0a47563b00e90cf9d2a458c350beb09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...