MAL-2025-153414 Malicious code in avminh-afgi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27965a177fc47606f2d766ba467187a42e09551bc51f28a19265c1af1381cdc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151158 Malicious code in aben-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d6233ebacebfe198aef0beca0981b61372be4d52ccc37baa249e006e72ffa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158440 Malicious code in lookingan-nalako31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8068550de7dbd5c781cbcfa0ee464e221d1fe14ba9e96bf3f399ac8ea1b9e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169918 Malicious code in uinsu-losit-dilaubaukabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d0a601d7a2e841f616cde265ee992fb75d5fa18df49f31a5c8ae7bb2e57a4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170249 Malicious code in uyifiuza-iytut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c34295f442bcfb36739fc1d99ad8da81dac73f4e0ea18fb7b6dd940a3884d2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162125 Malicious code in nokire-abimanyu14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a4c6e335ef2cbefdcb2fca119e9777ecc3d7fa76f1fb4b500d4b7962bd49f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161598 Malicious code in nabuf-otoimban-iag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4ad5d050c0e84f231933138a0f6315fa0516e6d242e631cb5280cb4c13fac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155617 Malicious code in hafiz-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b830634b2df594c1f81b18f028ceb789c93fa818ace3c827dac122c1c0364ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155599 Malicious code in hafiz-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e9e3fb7a725b5af36cf8ecbe84e7a6df5e63ed702cfc976c54d75e0a37a5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158706 Malicious code in lookingan-namakita9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a368b8ea25e91bd9af1065b4041923d5a901607cf79967033101e4693ae058f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170114 Malicious code in upa-lublio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5546e37594e36ebea64e2a6e669189701df0ef8309b1b97f71d804da81dcf3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-0-wesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f778cd48b870b32b99bf9511faccab77b1a825799b15377e6c84ec7033ab4a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f6570a31deeb737eb876f461437818788d2cc79a134663436d0016c5e14037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cceaaeeccd163861edcd1622cfb8c741d34a6a5d61e0c1b00e7bb30662ded4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0316b058b15953c0a06ffb852edfaf28f8716dcdfa284762a272eaed2612e197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksunu-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13559aee79ac8ecbae6bcac82f4267b53a56d603b0c0bd848d63c4871bab01db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3eec729d13412f964146fa4056d8fe2aacaa3b1345d37bb6d19f2cb9a7fca85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ba3f1ea48e40643a89ba49e0c8608cdb7c522148ec618ccddf2b74a6f32ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kkbd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ff679004bf780cb290f83a35d128023e14f66c8bde405f67865d7436937536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ed4bbed0d32547138202edcdc477fef4e53d0e7d2eb19c758d057602f3f86b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...