MAL-2025-184689 Malicious code in olobc-uyg-ugooffahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af11a758175255c4de58d55a66c1d7550a96ad49db839232007f8e91ef057d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ce7e5f4ae1f3788607769a6135ff1ee610e9eda662e2a0953aa5e2ff20f9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175576 Malicious code in ksai-kais-aji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ea3a590946bde305f597f89254c22d4fd164ae335fefe0efa84162b67ab327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fa1c1ce3aa78921fdd3c45d3366bb589d98fa16b8380003ee64996c162d2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164954 Malicious code in rita-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d095884c539343405bac5b43c4536f3f8ee133cf5d172d933bd8818b48ccf9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159667 Malicious code in mans-manapa-mana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfe8db28204bac08c8272e135e3649fd27ab42582ddead4a99f7a3206971bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154458 Malicious code in diago-kuli-luui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c94a6475921c6a82fe49028c914a033a2f9f551dcb947a1812843cfac9c1166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165710 Malicious code in samehada-fzhs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9093451aabb3195bc16518c3f0db592c64d580f87f570e09938cc3f768d0a937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-frontend-jasmine-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd8b8ccab7799216be46b4cf2e947e5092a34b8055fdaf5a7de01224ce7b9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-private-element-ui-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5256a58de5656427ce43274a191ffc9eef82d97edfae23fa63c7f134e0113a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-tiwul29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05cbfc51ce5eded70bdf564e056701ffddc24358123f0a2814fddc1d42e57b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-taiwan99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b564eab3513b24c922f15d99c19aeddd0088d120d75606bfbab63e89224a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-ragi90-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d5e7e9a5cc8675e8af501f55eceb66e06a7b666b0142fbd73058d88bb0a0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127905 Malicious code in kiki-menjes65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7c6a426ee381cf30f2660d85229f7d9bae02f9d164d69a24ffd1f4fbc22ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-sasag58-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02bc626d7b76248993a0458bd8840df3150f82148db9881c6cbcea263508dc36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124431 Malicious code in yanti-gandul75-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c6ef1671b13b9cd55617682883d987bf7c4bbfb92c5c79f3943f425fda147a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inevitable_kiwi-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82828a261f6aaa5f0612bffd4170aa1c4bb5474f24876fcfc984f0b101ec555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107420 Malicious code in puny_clownfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11f725be6182d3702517f2cd300b7445852b00e054928fc5ae4ec07b457d52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102199 Malicious code in erwin-dodol54-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48eee823ab53427bd0c523b20d1d0ed30e43bf00a2ff4e6657e0b49bfb1afe0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...