MAL-2025-155591 Malicious code in hafiz-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7871a08a6a1df505fb98299c714036569ce19bde8b3a0d9db735928cd405621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164140 Malicious code in pilka-kalimasa-vubib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83885d84d2ea5338715dfbcd2bdff23359763cf28f31fafa4b22b35fec8123a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159793 Malicious code in mansila-tfla-magazifidgboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73b112d4d52ff738a1784bbb16617f1c0e7b2f4e817720c2371537140062a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158904 Malicious code in lookingan-namalaka88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8027f89fa939fb54c7530591fc5a2b5aae82687148b9d4706e68edfb3a269c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154744 Malicious code in dioalgo-klp-akauaakuui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be851b9814fa5fc95277de5a2465387ee4d4d1c0b717f3f7ad4dd8dcda6fedf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164002 Malicious code in parwo-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257fc20ce62730ba818f26debe29afa8dec1960a695c6638bf6ac4829fc6fe40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165537 Malicious code in sabulali-nali-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6c0707a654ac88bee5faae9eefe1f4f24ebd35c825cbb99092847a3fa02c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165642 Malicious code in saku-aiu-idaduasdsasuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466da08d1566c9e5c37271eab2654c4749d1aab35470c24cb33e7ea03fbcc1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b88fc7e5278b92dc0cfc010d1271b1d3e4f2d66023866df517f44eaae67491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86e1056c147236e6725d859239f714bc85003df1f9a63f9cb8bb1a4eedcebe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b483d23929e71cb3f354f6829526bbe410baa217ce2dd4ca5282b6f6ffb43728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dbe643f71e1759ae0678e41f5ac800c61f8048d8221c85c1b45aff3fd34861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fe8ab992b184f06c98e1065bb0ebf38cc18525d9a8b38c34bddad2b14e3f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makanabi-aibiuba-ufufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68280ec25bc3134d30e84943bfe04c4e45bf200f767cde9e3e8dc6870eb8e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaadgg-musni-mifuysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f111b0730d5fcd97f6c2e953fc512a82837ec792c7649970b2ccf2d46b868a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc02cee55f7997e2e271fa79db929ca97fba3c98e38852f2ad6567583f49d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152151 Malicious code in akabia-aliguafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b089a2a32017d484d4355e9fc4b527a8020f1f4fdbc4fb4ecba138c61851f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150907 Malicious code in @miptaa02/reaalsazy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fdb52cbcd9bae282da7fb365a8c5cd91c2e803394b4f5d069072ee90a39e35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164474 Malicious code in polymera-manuyat-mdsndad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f228f9f04a0337f2364024044898c1557877d5011f3f03236fc55a8e6732dcde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775b65e648798ef08cd8a3f044b3f2fb4221c7a145330321166b0f18734e9b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...