MAL-2025-167316 Malicious code in teagood-nakamala50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cefe63cbbf8ce41209bceb78d8e2b36896d1aea3f4c3403492d1b8c9632cae36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153730 Malicious code in billa-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86426e39463ea719240dc1424bcca870783f96fb7c339373f8d7b3cdaa675d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158957 Malicious code in madan-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c892afbfe27be60d23fcb2d70a8cf655a901771a5b4f7f452941b961f3f6854e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153797 Malicious code in bintang-tea6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b982ea3a3c065a6c3916254856b7cbb59ab2da3849eabb964b59a7c6562d7db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152521 Malicious code in alvira-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f549283d0ad62be156fa410bd2a0f819555bdf9e35d52dfb11883044f07394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152108 Malicious code in aji-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2de821e88d51f1136ad42184459e6b65109dd74bed04d6668ed80ddf21468a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160363 Malicious code in messi-tueda-sddsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0fa41543d3c39ee6251b396876a1acd0b9b85a12c21f4b7371f02657d9af879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168453 Malicious code in tealove-nanami24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e3aa7c104a7b58d0fe556cad27f16c5f6cb67d84a453bca407f828beec2a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169170 Malicious code in trevora-cir117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec22fd7561730954b7cfed87d9db32423ec2b27e8e3a7e23e6ad9a62e4019204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169380 Malicious code in tusaaya-redd-wfesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af5877c8e68bbf41e7ec47cb8ddd7a1d10ceff55e1f228fe7e33d3b2d94ace8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156491 Malicious code in infi-gafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71f20347fcfef2050f4edafda83e7fa72f0bc256729ed47faad6a01e82a465c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170154 Malicious code in upilka-luzmu-kijnugijani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33e6e194a1daf94fd23ab3c0bdea5bb801b382f3fedbb773fff8df20529037f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166159 Malicious code in suharta-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b340e5ddd46157f3b8a799dbb2b55085d903b5ef562d48fdcd2a3e20a944022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164753 Malicious code in rinto-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edcebbefc3421b1c302b889092c12d761cd00768f6aff3e5ab6dfe0e75ece8c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169300 Malicious code in trevora-cisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c786bf399fde2a23d53fa81342e322dabb5aca9410e7b2cbff43719cd7ac57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168059 Malicious code in teagood-yakuza96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c88b57e0a0db07ab3e9d0e04b03fe38fc6582973f9a0bdcd7fe87927a561a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153625 Malicious code in azhar-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5426bf419487a37217674eda63e60620d29c4bd8e1d9119aff97316c65a1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149938 Malicious code in @mipta1/asarar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0a963a4e6504bb71e5b53a299d38f4db61abb00134575ea384977e5ae8dce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154574 Malicious code in dian-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e08c1d99ed74aa75328d503f37de380a9574c8f56cbbb546b51657befcbfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154840 Malicious code in fadila-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c221b08691dde9b8c400fd8b7a7ff3d60bb1bca0ec7fe96d7271a8b08cc9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...