MAL-2025-152844 Malicious code in aril-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e6a728ee1fc894c6e0e7ccf461f6b12bc9e84dd614f5a024d647cd4431f15b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152205 Malicious code in alfiansyah-pok10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749a69aa245e63f23234306119159c19d1670195d24fb451225d23adcfe5c16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156419 Malicious code in inal-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8927bbaf0b5f4ed1b401b65a010466450e72576b8fada2a86c3261af4afe899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170108 Malicious code in upa-luballi-ilualu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84e54aefe66a7897ad49680227917b9cfa12565cc2c29b40e9dfdad5e9a1f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159525 Malicious code in manaf-marzu-masan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa5aad4f1d937f04b41695ef2c2ee9350ffc7ecfa610e3c0203f6c6e9cfbec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165920 Malicious code in shilang-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea50b820c6877739269d066b1497ab0eaea2fa7facaa06924384fb0aa418768e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167836 Malicious code in teagood-sukuna79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0adda60ebd0e87a8f23406363e76c453ed0868ef982ee5357a9e0994450a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158064 Malicious code in layla-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ca52036783d7ec18a0ceb7080ccbfa6a691afe8cb8180f5362e0c4a0ee1479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157185 Malicious code in jurss-gsad-14s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fc4a24e27642a63f550098a91566b93c65838b07d632a321ddf3f0f6d67d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150041 Malicious code in @mipta1/guyk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c3ee0d418f7af2f867e220591ee77d064cc06d6e1f08a10289d4f690d209f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157303 Malicious code in kamasada-nuati-vebasoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2961149e328b86797cdb2ac632f986d53cfc3838e289a51dad7a883d6db69c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163230 Malicious code in nokire-nana73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c500f8409d0ce4b569f47c077e0ba2b78fdddbf388814ee90abbcfdb467011f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152975 Malicious code in astia-alao-mafadi12paf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d988fc7cc31dcb19c921de81fcbf56b4e66be07ab5ffb9815f602eddfe00e9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156520 Malicious code in intan-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701f1ae500bda1b153c8ef18aac41c7ed950e3d64647e12727a679af20562911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150212 Malicious code in @mipta1/sasswsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b65d8862840056829beee1795bde239d8c7ff1c1dc0b0021429587301d3b624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152567 Malicious code in alvito-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de042d17576d8e3ac35f773729d235df24c7608cf5501e06bfddfddcac302d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170276 Malicious code in verify-aikun-miaiaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ee4159d333d7eb7efe8c4d889d14e4cd25364ddfbf1245f09ebaba6761eb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158254 Malicious code in lintang-tea9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d28da388bbeac203abc19deef448014801e2bd9f606e580332f5264126a7c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167864 Malicious code in teagood-yakuna103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c29d75bfe4d8307e80c2349bb9068d3906fef2c370df255a30cb5e125f5568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160339 Malicious code in messi-sduda-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764a4f17aed000e0dd5c86eda14faab87794d2c9384c9835d5f11854bc247c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...