MAL-2025-156273 Malicious code in ilop-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8e30c41cc7718e3449348d4898e4a98de50b7eb98ab2e1e74ba8b8c7317179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153161 Malicious code in avminah-fagmaas-adfigmaasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc41afb4d09f49691da54ed3b026b5cc92fa57f8aa77477cb657ca24d74237e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153902 Malicious code in bni-otaima-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf427762390d4f7dca174617178b5f74ee74eef3b27595c98494933e8f722a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161359 Malicious code in nabuf-oguuof-dauhafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6b91f1eca982d0c83c1c7141dc074565322c29b6b54b97ceceb1f909e00680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munya-dsasd-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0095a391ebc1b30f1e5cea2371303a06653c5255d3ee79d20a48401bc941da41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaisisulah-pauflai-asu9aia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b412ba77666a5fd2d8b8cd4392e31cd408a556d31a5fb79ac4223535392cc6dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuty-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c52bae30aac38d6c372bae645b44b6aaa0d1d12443b1519e9ca66da1ec37ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ot-uuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33d249eba894713e91eb4df873159db4dd78caac701960a453b182b521e5092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f688caf23bc47b4f867687f6c84a29bcb73277bfeafd3c33c059bafaacc27eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba247afe809694e571cff4a6ccaf9646e9b1eb4fc75bea62d970ba8e4d39f20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c16fc50d930b6a0c4ab97f6c481df8c4d63bb208f6d4afbe1289dd470a95407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4772cad26423a85b4a26edf51211888d15543575499dca07046292f0944f674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14a277f6b255acb0688a41305d04db267c3c518663a49d53c6803b3ec4ab2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb22f14f478f791abe52a15b56beffcccaa45c9128f5600fa0bb805092a5fd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ksofdads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92ff3579e4e4fc9590e6f4c92c7066444a80dd9d1ba3116ecbccdd1a691af52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169997 Malicious code in uinsu-loti-baam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be800a026149df2f288be3e2fff8cbf7aa6c4c7b58a24da1889f5eda808825e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156335 Malicious code in inagi-vuma-nuagivua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0629e9e35b89f2bdf153169c11f8b35e5f02e0887af15ec88d113df3efa5b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150260 Malicious code in @mipta1/sujfdsua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76883d43f3161f2c2d40ec51fbdda6b3e51d7753d0909618b942b7f1f5ca249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162661 Malicious code in nokire-kilua69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c1655ae399cee174b089a6a4743088bbbe9d9164c37fad06495dca636a4594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155998 Malicious code in icha-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6fff66789385d79aa31df1d7d519581d1ef5e0c4601f5ba70d3a2ffc4ed6ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...