MAL-2025-151376 Malicious code in abina-amugi-anuhabuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5c22737c165dfc37e2f6d0159b66f7f6d300d732bab4f688351822c8f7e22d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155887 Malicious code in ican-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6b7b18d491182271c86cf2e1045e656b5be313843f824353f38cd6e6d10f9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauhuu-fada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef72eabb10a2ea5d82a29379a5914676149130b7d0a421a415b5eabd44d8789b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335eed60f7241f52f5b725f3142e502c95da620f493ab19e8b4ebcd0da781ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153040 Malicious code in avmainah-fagis-fofyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b66cd7ce0ad9f5cc5b8e79d0b1178bca12313ca21f6ca09fedadc700572cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168055 Malicious code in teagood-yakuza92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3acf205a716e89847190757851ca4dd8235b0d7baa9190f7ff13efd433d83a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albio-tolimasyur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65867597caaa8124c6b01130493dae230936e545fb4d38e01249ce9083ce0fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155125 Malicious code in fitra-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207be0ecb2506d5383e3e456c8840197420248c3c421f62a05689a55f4b2f2c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2058be80a5bfb42a112f700e26d4001624026b353622af8b792e1cdaefd9c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa4fca0324574e53ea696b8f031ca6fd2e7c2884177e155ec32ad2748c7009b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162645 Malicious code in nokire-kilua54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964e16f46416b1cedfe7240df501568bfbdf15b570d8474b82f353a1f299bb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158953 Malicious code in madan-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2c2bda3f63500e5944ce3a630acfcb8757192bbb3a55da45046a48574ca4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165808 Malicious code in savion-tusa-ise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1effe4697e5beb0766db0da6a8093a5da3bea90d8af3e28809bd673b91d2d857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153977 Malicious code in buta-sf-ters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87098a9fb647d693cd20a48de499be8da8f9f98b7906cdaf6ca59ddc93bd130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156427 Malicious code in inal-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02b2fa9aab585b4fc1f75713bf7c9570f8113c1c0c08137ce63dd6f79cecbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a09bc4473ab74f0cc900a24a2acb8582fbad9eda5e0bb578dff1acec9ad3a2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153250 Malicious code in avminah-fagnimas-ofisufag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de4014f4479723d684731573be59088efe2a6b0eef71d1a219c9de411163ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sxhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4372c71d31910339b01b69cc668f7930ca0a4b97334dd2365fffd36d3ca904d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161511 Malicious code in nabuf-otin-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56583a36eac2459b72c9f43b0eefa2bafa495c664e7d7ad6a211c899ae9b1583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155193 Malicious code in fitrok-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44715323a34293ff3b7be2c374c7f4ac5ba18f40dbffbad4b036f02b648dee33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...