MAL-2025-164217 Malicious code in pilka-luzimu-kinuani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ec2b94c1d58b5b80a699f11e69cfc9a80fc7b61f59b27469ddfa0dff5f0b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154926 Malicious code in fadila-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bdc9410329eba8199d9106bed3a4242fb7394dc2113fe8e2bc9978250946b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160027 Malicious code in manurung-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78eb0971837a86711e28abf2ea0c09048a528466c059859a003ed8ecb233b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157238 Malicious code in kamasada-buyada-budtadania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0171fdb8432b590cff5bb04c2335a7eb27c9d69e521fe2e593d850ef2b6c052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159477 Malicious code in manadsi-soradid-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577cfaee21deb33aedc308a92d901f1f411b7869c81fb51e946d1708f485f812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169432 Malicious code in uafagarug-miafoi-sut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58b1e4a3013a9f7d77918f6db3b9789cc7961fa2f40f00b462bbdbae1faca08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157408 Malicious code in kapafovgfiagangagapfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7385d6659d235ccd4a035e8fd6eff4301cbb750ca64b0131ca2618f1b24f4e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166012 Malicious code in slamet-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06595dbfe70901918961a56092ceaef6483a5e1fd988d50e5805dc9f27641efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150648 Malicious code in @miptaa02/fia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e765e4f8758b7bdc945a4bb4471d82e5cf8266e9e7c4b1f7f8a3dfc64ee71c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167172 Malicious code in teagood-nakama100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9371d6ad7994aba4486a94707909fa6ffb444197fb12ff6f7f49924bf1c242fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153551 Malicious code in avomainah-frasu-ofuratarau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f25eb73efdc6a24c0fda816ad22bb1f9cc3d86ae4f86bb4867d8ebd9501f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154802 Malicious code in ewa-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4592e9f4c286caeb521f0ba92fd66a24b3a1e16757c884f5d5387417dba1e6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169071 Malicious code in tehah-nuyt-mantan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5a8dfcde6d05a01fd39b7f17a5fe63d23c339ea92dde1b9696824ccf70ac46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d612dd74073fe814db6efdb43365e11c923b550f7dba49a020f1aff7b7f84b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagimas-ofisuoafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781d420bf8383e3e433df55166ffc8526523be67b23651e54ae3a972a1ca607a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasismem-ba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e035727eb055f513f438be35c968c7c6dd8eb7acf79270815e93d92271630ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4bd5cc5f5913f967cbff8e4a4818655436e8b80a8f9770701fb9ce3fd062770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba3fc59539e0cb108a3f83f58b07addbadc1cb3e792e9dfb49956ebb2d6ea235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e04a36e96694780dd302bd88d626219ae529753f3f2392997f4abdb133ea47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0072efe7f8b2b34f6615b3536d3c294f3903ab82c7aa886f225f5c209f2b080b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...