MAL-2025-164439 Malicious code in polymedr-minus-buipenaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9f2d9a407056cb8d5445b80f532fd6032ab37ca5864dcff363798d1b887bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152536 Malicious code in alvito-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53fb7cba796de0ed5ec284c153f70aa84d57935038c0e41dd972192059bcd27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156095 Malicious code in ilal-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cd6543a1f33a5383b893d056b7cefdee956d61e94a9e6dfed421c29459b0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150168 Malicious code in @mipta1/nihsad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6098e870329642861fe7d7fc6b002077bf0b03c1a4059c10d8e9605824baa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151425 Malicious code in abina-mibiian-auruyasta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e455c4065ba50470251df944de29297b432188e52fcc1c83c697058e125155d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150857 Malicious code in @miptaa02/nda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e169020143720ac074c55a1a88ce9415322048fb839f52d2878d6e9d6f95107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154027 Malicious code in carva-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c38a855f05299d6c02430a6999d7cb56d6bb07495f740ba603dfcf9eb436dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166228 Malicious code in suharta-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dabf70a1c4c80a397bb902293546cc17cb3063791909c3d3fcfeaa29040d5233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159439 Malicious code in manadsi-sfda-marafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f23fe09500fb6f42458629f5b5ec32aa3ac6ea1700199303422f0e6135fb2f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168113 Malicious code in tealove-aruma9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da210d90efa282fe8160756200afd1912cd237e0a7fb0f045501ed5303605f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155083 Malicious code in fini-savion-trans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c522b75886a74d5060eb03a1e5fb01f1762eae2bf0ae905bca07adf2ccec8ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156255 Malicious code in ilang-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4357c9320a6cfe95ebcf83778911e5f91c6703415cc7f7d38c22951cd6f06366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152121 Malicious code in aji-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9349d6da31611245f76eb8631f36274e5b29b64cace0fe3ecb9abb5e40c8d41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158248 Malicious code in lintang-tea84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8889aae0a2cb692b7b5d133ab7dc867fd8e94b96315e837f75340ea78b9edf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169792 Malicious code in uinsnu-lumi-kunal1ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d855dcaa0006e8fb0a1e682ab89b9a89e099dbb055b04e3fc6ba116d363b466f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165523 Malicious code in sabudaaopa-muyafig-budfaiufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b426d68299f061f47e865f38d4f9684cba231e1b8444fdfbe0dbe6f5be5a3e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153047 Malicious code in avminah-afiffsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5765700412a7a67fd7c0a869ce94c133f186cf9badc89ff60b70286fd78880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158279 Malicious code in lookingan-konami20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b22dfba2db354db6150bd93bac5f993e867fc7eba76caed312a905117bf6870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154831 Malicious code in fadila-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca1508b2123c5cd492cdd46c10ce8a18a40b6b69a0f514b70e968c6024c661e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160617 Malicious code in modirai-fuhopia-janitabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a356d5aa11548fe51009d99b7e47bd5ace345b9043601d7ef47aa502ed309d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...