MAL-2025-168862 Malicious code in technical-alin-itubauiail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59416d214b4ee573c7452d0e135c71c4ef9a327918990d25c89625d2d17fccc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154429 Malicious code in diago-klp-kaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9e41825e677eecb5fed4a2612d1137fd600f96ac890e51436ad374286e735e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160294 Malicious code in messi-butsa-buysad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27126b804ce52bef4ba98402b0b22eccebabdd85f609ef3a3c6ec507467e2cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muuyfaafu-dauafufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1b89ca3874a085a931f4e44838944be58c076b5226b1a7d6bb7ed69f78a7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gobgilai-januqgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58925174bb18f4192ee7e2fb3f1b8c76b556af12a078214b98ba909a753832eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5187ebb8018dd8c4e964433cda3b616c596dcb42b06c1d58c25fb00e05a039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150605 Malicious code in @miptaa02/faeg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888b4b3d1e474c949f45d7e7fb83c79337b8d0e56cd9535106ddbae71f5a6ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150065 Malicious code in @mipta1/istdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391094e61156471ceadc3faeb4eddf688d0020d888fac630670c3e278da29a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162663 Malicious code in nokire-kilua70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a8be07874b3f6d18d6838415455a4fca63beb3b4290fbd8ffb9796bbd57c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161157 Malicious code in mutr-sds-bata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8430f78325a2f53e9adedc6988470dbb8764a16420c47ea72aef997777e3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3189d13ad2bfd58d57dd094e5663c6fbd6c51d565cc8821b30c493e32de127b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169041 Malicious code in tehah-nutday-kob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5ef9a8e22c9b82832ed3e59ea7016c727d9427f4af22277642e391e640a2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158765 Malicious code in lookingan-namala52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3226bedba2a957cfb16817949385bdc6defbd93c53b5d498c2bc752401d9f951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158898 Malicious code in lookingan-namalaka82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb1f468424a1b5e02178c871c093a06f81f75c2e4acda55a773117980ae6579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160655 Malicious code in modirai-igino-jimgugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2a7d224abceb4c58ece7eaccb684603341f4bb4b74fe79c5825e34a0b3f617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170127 Malicious code in upilka-lukzi-ilmuzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cacf61fa2402eab88fa3f01f9d431e5ca767dbe67960cc44bb7d9218b8c6a563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9778ec40d163f0daa91aca28be6b72165660b3543e9993fe5717f18a8d89810e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151007 Malicious code in @miptaa02/wavt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32180869124e762e7edfacaac8ad405b14158ac4468aaf288fdc0567f92e2bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotamaia-jamanana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bca62a71ccc865d3fe02856a44a47dbc073b69e8c87fe91370528c181b16813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165709 Malicious code in samehada-fhzhs-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858042ddc72bf74cde6a46388a09247b77fcf3882726492b77e7e9f36ad584ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...