MAL-2025-153206 Malicious code in avminah-fagmas-diogg1aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527acd7c3f1d7e29a77ef892ad88f9cceb80dc8a1385ec8536b9b1bf4a011d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169240 Malicious code in trevora-cir45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2179988984290601da35bde1fd65f8b008e44e65eae4950123707cd50f1f6b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161460 Malicious code in nabuf-otimmn-gaopoaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbd192493ecf0a6d78d4d88b3bd6a939ecc8198d889758195297d07c89f1d0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168639 Malicious code in tealove-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd00f18e1ff0acc3499de5158b2fd5f58c1564dbd0d932da7a2d9db6cdedf708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158693 Malicious code in lookingan-namakita78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcadbec35f7545061d6f4a11d183fe0c10f19e1daa610ea15e66e2b921c71356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161118 Malicious code in mutdaufs-marimasa-ay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd07c6652f06dd9c89c899b43317e0254b06e43dacfdcf59b0fcf0b9cda4f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158513 Malicious code in lookingan-nalako98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60c9fcd95cd993c92436cacd87324d243f4c586647a0868a70bd969348b403e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154345 Malicious code in diago-kalop-kalosohabaibak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e7f59f45c3b729cc2da9c041d3862b5ff486659bb9d39da77db345a5ed4fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165897 Malicious code in shilang-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148ec8579a43f1e9350fa359436049c52b19001556b458a8770f5491ec1a0003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161585 Malicious code in nabuf-otoiman-igamoaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8e00bc3dddc93e3f4c6811426301d9e62802b088e296b96362547ed99d5a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170168 Malicious code in uragifa-afaoti-uto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcca8fcf5fa3719f2c6e79d0939060671d69a87d08559fcc50d59c93fc62ed35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155199 Malicious code in fitrok-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e2935152789a2221d7a6e006fbbe00509d62768b9fd68d50f9a96904d8e358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152125 Malicious code in aji-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de2fdcb20aa99e7d8e299c76c94594c20da243f3315180a97a47e018d6036b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161609 Malicious code in nabuf-otoimn-aiagfgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da302d8156d22ba880dfaf66a3f205c52f23e6a735c5cdecfe4c13b2209e38b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142430 Malicious code in favourite-coffee-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9ca0e2b4bc589d1779f36ab439cb7a963d9e4ffdccc1e2402235e183ddd9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-fornax-ini-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635fe853f926b64f3ffe8ed1be352a1c5361633308b5d473efc4932804483edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-express-phenomic-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d9c5814154ab32cb6266dfcc631d0eecf3797aee3527044383bd1999e4c9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-tool-async-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df7ac2517321d627a4a92a8efadf37ff3d48de62cfe0c4c274c0b5083e53d7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-ignite-hermes-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726b2645751743cf3aae79ce0cc9b10a4997d86f928762af4164921ef402202d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-comet-kaus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19e35c748b77d4b457b3cb6602edbd409762762c7000fa53eba59cea78c3b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...