MAL-2025-154414 Malicious code in diago-kamuli-lukakimavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3777710bc15d25dc22005b8ee869feed0024c89be45baddbcbcd6b911d7e41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152447 Malicious code in alvira-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42600b321a0176c922397674eb2572792bf3fc69585924c2a128124ea7c0f270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157485 Malicious code in kapvino-somgamoi-faoagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b821bd2131d461285e25322ea690a5b1d6726f7cd38825f42a3e5c6c5590cb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165507 Malicious code in sabubauali-nanliui-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5290c5da8fb2ad5d6086f71de06e3fa5bb9b31b91c29118480440ffff6303b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163209 Malicious code in nokire-nana54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daf2a15481f17906fb33594f60fa8749bd60b99cb9047fd16f08a0bc514135b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167189 Malicious code in teagood-nakama25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6772c4e37e3173e2fe481590a5902f7e6521285ded195bd7a7564341e9981078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158150 Malicious code in lina-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1abf74803326fedb4c1484554d9cbe73e4ad01525bad4ed3abfb00270b1516c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157722 Malicious code in kuinsu-lubki-nasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523c96d4fa12977098b460a2e723e009d9d07ba0d5b536a7a67fd756ef468177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155367 Malicious code in guras-asia-bangko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809939b483ef1d299d67ab9b6abd09abfd1c74834ddb7c108da5f5409d4f8047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160832 Malicious code in muklis-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d53ffaf9a7eef73f47ceca1454e1772b7ef84b9ffdd39aefa0dea551a669c5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598cde3a5005d5419030b7e4251f9ff58e4a093a8f85758d7d64dd482816f14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1c7e35d94bc2f060d0dbd5d89782755244a3827a1ab2c1deccc39d760589c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-faradda-nutiraa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e5a817739e3b05519743b1128c7a0f8c0aa050b8d0b4068d8a113361deb4d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manila-ala-mafgkoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3678545cbee506f07ae028ad7665cc04de438b78e9d9c345617303cc989d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118e93e05759099e68da5911a4b73a4605dc085e3b554870dbd0c6b061af11b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcc3381b5e68e5dba82ba7b15f4762584c5db8fadc54a339c095210a0e24814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d7f382114755ca4b33bfaa344e4f53732d2924c3ef7a292de8cef0a946a348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lot-bisma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec25d168f324495a15125ba9371c9323a299259fd3d7718ffd7ac0516a4b2831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-nvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36db63ae9d69c9b9d56c7d94fe3a30a82250b536a66ff27b3ed972bbfa3a9cea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cbbfb96f3573bcce2879e6053e74d8d9eed441e9e08415e82a1c8345bbc92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...