MAL-2025-155261 Malicious code in flight-dangers-fant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808b8a03544d65a67a4866ffaaabb9ce1303c7edc3b6e59e3d2555f981104475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160697 Malicious code in modirai-igno-jnagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5173291726a2162d078edee8bd31166c98c1d474f4106438f7d495011b191383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150576 Malicious code in @miptaa02/dxsfxfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c84f91cefc6c46c190b5d17a0972f3f9ffe21231c11e01bcf10227a5bcb8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156059 Malicious code in icha-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab0e9c0260fa5a562fad24fb4cf138b7ea5a4e9968903716b6554358d629b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164504 Malicious code in polymeria-yuipo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee20664f86a0cc4b1c9d1d7dda4552d23d3a0ed86876b966cbb8d71a06be4076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169016 Malicious code in tehah-murasaf-manta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f8da419bb3d0d7f294c9aaab2574000d57a7004f4917548f7ca2bab8b9e7b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169826 Malicious code in uinsu-lisa-amudakib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba7bb7f46c52b8cda82b5652c2eb6537270f45afd192dbae8a6f3b574543310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157844 Malicious code in kuinsu-uyilu-viakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2294a9afeca2aee281441f0d248980939bb93ed13b96b53c3cb8ad99f9087947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168443 Malicious code in tealove-nanami15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b56c2f549e2bf89fd178de78ecbcd1c21b99ec9cb4d07caf95451a545484b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164891 Malicious code in rita-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f298812b8fd1eadca820804d56357ba5f739476373ead16c6d38de114027b861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157185 Malicious code in jurss-gsad-14s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fc4a24e27642a63f550098a91566b93c65838b07d632a321ddf3f0f6d67d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159751 Malicious code in mansida-nomfmadi-munaiganau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314f028eff4d8979fad85b95cac9fdd871a9ca089af616d105c407b7070abff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155336 Malicious code in goodmanmax9250-forget-grow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1414d8718d25bf5ad9c278743476087f2d3560c4437f83991256453a1f7bc41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165233 Malicious code in ruji-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1330c47176c18ad4e5182afd4708733b1084b1fd0e45fae0b673010cab876c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168020 Malicious code in teagood-yakuza60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8ace18b05a1969ef96c4364f6d2c9aaada4e706e7e51d8696fd4af732d4bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152723 Malicious code in arif-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d1cae547fcf35766c7620a62ae7b7dfbfd9ef6e03fe78d9a8ed5068a6aef9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157027 Malicious code in jele-rasaaya-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7e93ac6bea9cad22247c50a0e035c7f06e19eb0d85067c627b4d0be4c0ccc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151715 Malicious code in aciydua-idusust-daru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05f7fc93e46140ac77c1ce9e76a5739000de902f07cdaf10bdbc55aef5a72dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165000 Malicious code in rival-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a639bf06f6ee23c110d4aa922ce9b727574fe48f1c2e2320944fa61ff84ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165717 Malicious code in samehada-uazsr7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cfcde91122897abc462f73910be46443d0178b6bd4dc2d18a06ae8e885cb16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...