MAL-2025-164424 Malicious code in polymedr-mindatas-buipenaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15da89b3928f080cbcde72348ca4047d1935fec3e0d9509506126b6651172e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168460 Malicious code in tealove-nanami30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a8359fefddfe39daa01370660df2db0f52b7e9de7f1d7c0cedf6f34949e5822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165925 Malicious code in siregar-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42ac654d7eac3617514cca271eb50d0714c97c46084d33bbf052ed8eb28344c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168262 Malicious code in tealove-dana8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0305bc0259fc5cbf4d496fc1aeb2503e9ee9db2aabe824f70b0fe1ff2b1d6077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164497 Malicious code in polymeria-mayania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36cbdd8c509d7632e2717513e70f71a6b586e5ea703e97970dfb09c3eaf822ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168053 Malicious code in teagood-yakuza90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d37f7e808414741f888b12f6d66c93f27a61b29dfa038409cdac64d251a0cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169059 Malicious code in tehah-nuyadtasfag-amanasatafna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fec839834227fce6592ad7e155dc4f2701f96c8e5ba6a8ecc8f6eab28dda83a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154574 Malicious code in dian-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e08c1d99ed74aa75328d503f37de380a9574c8f56cbbb546b51657befcbfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160042 Malicious code in manurung-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ceeb2005a67c29731377f7e7348d4e9fe41fc7f0dedabf2c6e5b354f625511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158755 Malicious code in lookingan-namala43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ec80fd21d80140f5e95725c524f0ddf39e091d2b392b2373d51af7c2c20005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163878 Malicious code in nuilava-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b47aa02fbf6f758ab5be2b430645a3a4742a885dedfa76184fb02dad0f2481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153542 Malicious code in avomainah-fras-ofuratar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cccd9461b5b7345760b62173c18a2cb0206c0b1192108854d8f8c75a0f397bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150931 Malicious code in @miptaa02/sadt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8024c4fdfa57ddb89a1e1cf6da59e0fde1c6524eafc9e217411ceffc491ba538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170105 Malicious code in upa-lubali-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2aa997298072ba3cfea493b56e59ce50128b286a055c4e62e75f3bba71516d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150346 Malicious code in @mipta19/asallajaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4ee23628f8975b32ff8b9ed96b710b7dfe53240a71c58cb87e9b7f9c51446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150833 Malicious code in @miptaa02/mijjhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fa3efa66b895c69eeb499e3835f569fc59b0b1496b7075303db04406f47017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155377 Malicious code in guras-asia-th (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39c55ebd0a31abef33564b2885a89c4f5bc78bc37d71e0a5ff4808f25e7fd12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156244 Malicious code in ilang-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e7a541d5a5aef2798e4b91a4bd2aa4092ebcc859a8f87d8728507235c1570b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160915 Malicious code in munir-nautyt-nub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7297873af772cc49c0cc9211f1cf585a2e1bec8e078a1e5e0f6dc9b5a7dd6070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154460 Malicious code in diago-kuli-luvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e73d01905e58f3c27470c958ba5402332591ae485bf4fd6ca80992cf432e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...