MAL-2025-161743 Malicious code in namada-kasito-nagam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45ce63bac94bc6aad0941324c04f9cfa216c3fd7bb61f58e43325c759e7c4f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169308 Malicious code in trevora-gissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a7072ff1fdada9dd1efaa7c6b45b854dfdc4779caae95837323fa3f95bb47f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166700 Malicious code in tea-osss-tean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a9fb9f79dc13935b529b7735a778f415cef0b719f878c09a1a65717d78c9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156204 Malicious code in ilal-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d010d00538d3fd1e06a56f90f14515486cca3ae0a6f5b1da2625d10eeb675ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157592 Malicious code in keyla-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777b49e49a8c0a24d1527706dea286eed555246c3414bff5bdce998f9bfc4c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164837 Malicious code in rinto-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562e6555e764f9aae598c0caf3f6064f734dcd346b954c7905f7da7163b140ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156626 Malicious code in inufgi-gobali-janigufga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328c99abc0536df82897cf3917406658b4dd4c5807d38f9bea48f67459d64dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170165 Malicious code in upilkila-lukzli-ilazou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff65b318fe405051c9fbaf2244cd394518b5244f0c32a5834dc464cf6c3c036b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153558 Malicious code in avomainah-frasu-otuuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4dfffb3fb129ad92b8e1b6a95a8796c375638ad9fc7243516300546cdc92f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168260 Malicious code in tealove-dana6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ccc5d09e934db1a5591ec1ebd518c61b7b0dc19ddb7ebf02aa7b06b5874947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154742 Malicious code in dioalgo-klp-akaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243e6cbf748d4e86bf3dba842d43cdd29d7abe3ac338dfaf4c0bd93bc4a780a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcf57026c8819f69df99b8325d82c7cc40db1d3902ffbe72c1395e79930ce92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-idaduasdssuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03a129f4c877fc42bd61bcaa6adb7a58eb730e97b75be86973d02fe9d70146b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbb239d2346728221a7c342c3b3ba86b6c026da983e95622b7db90cc1db2a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7e0b1aa788464bd5a9bc55a0b06155270ca6b26c6d20e4b6c2a41c607faf3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-unusiakamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f803e9fb62755b0b7349a9a144f853113d1b39ad44e632ba8782d1f21d720a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iba-otan-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead9f1319fd16c6c0b76d51a08ac52ea383a841f7237c6b513dbd6e0cd40fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ef325c6d4ccdd21dfad94d9f945b9296eb0c1e8c70ece6c531b351fc2453f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analsia-akifalui-asulaniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c238013f9ce803d0c7ca2b14b4286ff319183daf688bef73a2098f06b8715ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-umo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d967898c499a56420cef668d5d4ea3d311659b6ccc0b3fe2ae3b20ff64f38ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...