MAL-2025-151377 Malicious code in abina-amugi-anuhabumai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3eae21946eec8e33c5981310c1bcf18f89434242aae5faf75fdb89a5ef567e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166999 Malicious code in teagood-lokina35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0c8d1369715ccccd40e5db76f5dbbbaaeddb66a51aeca40606ef2981a68e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150099 Malicious code in @mipta1/kofads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4c7f002f34c9da8141c7b816ba2ee09c3d9b696b8ae5082e75256ac6a27366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157011 Malicious code in jeep-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49c838dcea3e2ed6cbfb080ce63eebd1898a01e0a4576ee7c1bc298586444bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160779 Malicious code in muda-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4f999c2b7d950623701bb5460d7e9252f0b1237cfda96a6f008e654ce24ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150093 Malicious code in @mipta1/kdadds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b240a7f5c268572345f7486871761114dfd600c8b2f36de3b3649ac51c4b53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164165 Malicious code in pilka-lniu-kan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a164b3fc582daff60e5f37a1783a64bd147ce5ff27a28680436c34b86be6d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156676 Malicious code in inufgi-gotma-anfzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645a0d817c0d29e1d758aa3001efd4998a54c6896641d83f9a11d5b87b98e9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170127 Malicious code in upilka-lukzi-ilmuzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cacf61fa2402eab88fa3f01f9d431e5ca767dbe67960cc44bb7d9218b8c6a563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165036 Malicious code in rival-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa89c3fc3e05a65edb80eb1ed42b506ecf44aabe10e6d2d7533cefb72e2b030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166514 Malicious code in syahlan-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be7050334183963b0366511bfa59a0ca33adb42292509de7b6496ed3b04aee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152449 Malicious code in alvira-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc805477c2e1712991f3cc6659b859cd570b4b9205b2348649dc60f5abaa8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158655 Malicious code in lookingan-namakita44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ece07997ddf9bf481caf56616080e10d8cb23f314e3dc3d557958cc8e439e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170148 Malicious code in upilka-luzimub-ilnoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5701088c0f2b8d0042c8a514cf6c690848d69635237291be617604412aec27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160159 Malicious code in masako-males-nba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badd7023af3e2302abd0fca71841b2848846cd69f3bb0e467ded91d010619177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164855 Malicious code in rinto-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba85b3cf137b97a693e35e3bab154013133f45cbe94f2a5c392453d48ef407b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160318 Malicious code in messi-ftfa-fduf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee938325de263654e97d44dad9475c0ef7e0c18e4846aef1e282b3dbfbe3dbef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157955 Malicious code in lala-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94b868a0d966c34947a2af5f3619aa1a41a5f467d47338159d057e2d669af0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158511 Malicious code in lookingan-nalako96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b4ae05091494fabe10ed90c2e55898a8db8dd23b1ea4daf20f15f4d804e64ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152098 Malicious code in aji-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4135b33f804948024972fc91c8cf8e691b44defab54d5168d8b829025ef07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...