MAL-2025-159558 Malicious code in manapf-manta-n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae27cfe35ce96acded3adacdabbeae9151f42680acf66d07563d5f34c285905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164171 Malicious code in pilka-lniu-kanka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82218de0ee34bb708dd5431e2a14ce5359b7f0d951d1f2b60eb4aeb0a4b82ecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166665 Malicious code in tadasdhi-ert-sert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af08e49cbbd9fea076ec3fa7f534b0348428957f2decfabf15f75c3e756fd7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165790 Malicious code in sau-nakio-ups012uiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8df4dd479a8c0a98048ae7a9f589956c1c2effc77e1e99a33f3ba6297f8441d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152151 Malicious code in akabia-aliguafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b089a2a32017d484d4355e9fc4b527a8020f1f4fdbc4fb4ecba138c61851f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162046 Malicious code in naut-tyutu-sdaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04aac7ce3438838f99b75b3e10e7e8c21cac07ef44e891feef32d58a90543a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156381 Malicious code in inal-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6fdc447c4638176be1574bf3913f117d7fad4c6470f57100d6fe84b9face036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164788 Malicious code in rinto-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0215c4d31f8e54f3a4a55c0c3d36a39e8a4d19e288192af5b0d51b5728b2dcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170279 Malicious code in verify-aikun-miau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a13a7acbfdf1222621a1e0e6503c4311d382035a1e1fe451cfaf865a68be9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158290 Malicious code in lookingan-konami30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab0246fcc4b331f8d071de4c2a190f3ed4427f2b015251d0cf33de369aca5e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibok-ikalabaliku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46745594518b0d6c9e44a6a2ca7ab9f462ff7c522aa52feb58941bdc8c9c8d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156904 Malicious code in irashi-sea-swe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d758cfd20ad63f61a4a784d7f23d8dcae49675468821457380da4f989b896c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156492 Malicious code in infi-gafob-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e46da3648482101d5898ed7a6fd91dd6bfc2f40944e419228445b387e9edf5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160258 Malicious code in maya-teadf-hijau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e04063a0b5dbec25126c81428c262b53769232cd20911dd3bd012fe4dc5e3f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155824 Malicious code in huda-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b15e84b1558ca07adcb53eb2650039f543f3ea029befb7bb0e0932477523f55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166423 Malicious code in sunderlan-ud-vamukbaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f596e825a9d8a7ea39890b3098f2f4a06710056d572d6b60a39b518536372d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161868 Malicious code in namase-namuda-bkau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dee0943257fc3d93113d51ad88496f371ae4fb2643bd3f6b9bb0701ebc8d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158918 Malicious code in m-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44318aad1b4d502050f07cbde37aa36b4d6581b5342f6540ca56988189c57c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-r-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee14f533151602d16e016866b4d443fdb28b89c357a26f9f9402b6810235a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in single-bronze-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1993b98413929213824f81f73e8468c2f37c023b391bc8ef47002f7fa7fcb289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...