MAL-2025-152151 Malicious code in akabia-aliguafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b089a2a32017d484d4355e9fc4b527a8020f1f4fdbc4fb4ecba138c61851f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160607 Malicious code in modirai-fianuaia-jinanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92beee8812e9f4d1b4e3ea40a365a0faed529bd2935fab12bf9e079d653953b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154717 Malicious code in dioalgo-kilp-akilanuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0734ad23ac7d2c8cd67c6c231f8b273a605c8fd59038395b1391094a7f1db1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169986 Malicious code in uinsu-lotaihmi-kaanaimlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79f0697721e90f90c969493db08b3bc12fe3c81808c6d52dd74f03c5b5cc1724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161400 Malicious code in nabuf-otgigaf-dajaffi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022d89c220aec8f6e35a0a51fa825a91e61eeb5158db284112b6c9e560c469dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165937 Malicious code in siregar-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be1e82993c9c6c7ec3ad0c2b9f450f90ff3211174eeb95e4542f3147e274595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162912 Malicious code in nokire-loklok57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab8d22064efd273476737069cd3d2d7e7317780f6b520e6cf949172c00345c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154437 Malicious code in diago-klp-kalouba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff4e3266ca588c45c067ac7cefa0a0811a049c728e9388beb162efe728ac0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167087 Malicious code in teagood-manaki23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2c3f24d61e49450cc84897d3b35d0852ba190b53d79c9300ff42e3a9332de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164895 Malicious code in rita-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0509daf36783b4947b97c54dca5e8c957776371502e21b8b3c866f8f2bf41f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151997 Malicious code in air-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e26f9e9132fb1a56dc2fb99e55058b23f2de37db8ccc64c6ecfa998ebc66fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163623 Malicious code in nokire-zenitsu35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd3ebd6db86383d7b2d9389c51b7423830c4e19d08e3692374287625cab09be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fe8ab992b184f06c98e1065bb0ebf38cc18525d9a8b38c34bddad2b14e3f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226205413e08d463564d7dcf4932521e442cdb32589c951e5754a1bd373f2e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd100854bdabd34b1c80ed9ad88d17a31c3f64342551ff7fe49257ed6d97805b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahfe-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 036dc4163679e2b6768f60c2c33efee47d38fd6596900cbe6fba95a1aeb46498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc02cee55f7997e2e271fa79db929ca97fba3c98e38852f2ad6567583f49d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158259 Malicious code in lintang-tea94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875a843aec7d7ec649b42413fe6c083667b142fad78ab3fc01a7066e4494793f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157153 Malicious code in jurss-dsf-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b177587ee9a76ddda2d7b68b5fbc3bd94de5d4a572ad4d923f1a9bde9cc75f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-lint-global-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b343b3c7c23c80fbb1559d9e971d309967cfca013ab9173753f6cbf65fe92735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...