MAL-2025-152957 Malicious code in astia-alabokio-moikaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d308aa2f67c9baf0c60728f369b77d4d3bdb03734e61e4504de19438397747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158023 Malicious code in layla-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e46800bed346ac9667318c49bd2b1c133cdc09dd722cea19c9abb5124f2355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165859 Malicious code in shilang-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5645ec49365109fb8271715518cb173a6b5b225902f719da5a035478662ffc51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150885 Malicious code in @miptaa02/pob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f77e51168e10ac34beaffa6f0743196c2845adfb9ebd8a9db6ca6ff858db46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167441 Malicious code in teagood-nalikami41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa24c152da4c4a4d0ca93f5e07e45d50cf6e253cafc1daebc019bd53a3af9b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166799 Malicious code in teagood-cuekin34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0fffe499744327b3ccb7ffcfa64f4c2479a1fba276423d182edc8e7ab6c30a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156322 Malicious code in inagi-vma-nuagbarifvua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57602be73c1689a9f7448f5f0059c89d28330c2784e41e592894de100851299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157204 Malicious code in jurss-gswa-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51cd6bba4fbdaf095404644bccf47108c05e8f9572c207ffb7ecb515ce79306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161030 Malicious code in musik-dai-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36c39a063029777138b3ea1d1d2f7b8f40710568da03f9caed681d12fba4f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164059 Malicious code in parwo-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4a07bb8e375fd0a323995f03803c8a44bba1aac23ef634863c8112721e927e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161949 Malicious code in nasrul-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2550a59edae6a3ca707fc8d7861d4f59ff540405810a8801d86a788c4284b303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152002 Malicious code in air-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3eecbd23037d7be05e575d5f74ef289d9a18340d23cf9473ca5cc5d43000e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168541 Malicious code in tealove-nokire14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2bff48b3e09846cea2631c096c9c9c6ac188d4f2ca04e838a6a9ee1647f781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156457 Malicious code in inal-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e719a49bebf86465df0d34db4bf3dd5ba781d8f6fc77be02c7bb70545d13da29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158677 Malicious code in lookingan-namakita64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed047307f3ee8b69a64788cf62bf631be7f94f107e3d5ea04836ad8a82555b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159895 Malicious code in mansila-toaviala-madoiibsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14496e2e4f01ee67e8e8c5f8f06c38db0a20b0ad66308eed716b8c8900747233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164462 Malicious code in polymer-minats-burn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8539fcf80f11151725a45262add6ea7baf81491a4c3e75eaf032b854261f8203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169139 Malicious code in toyota-cir4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7b51f69e70003b26b96358f8e348011f8562b956167e7f1bb6718f3374b84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153057 Malicious code in avminah-fagiaas-figaayofomka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ef44ef0b8f6d17fade1d906d4ad957bf1d3e7df9b341cf74e0a0ae69853385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150977 Malicious code in @miptaa02/tfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78146787eec10e34c2e732a4a2bb559fda3290016e3ddff3ce9b96d0c4c80ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...