MAL-2025-160329 Malicious code in messi-jdgssa-sffs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f77095c3fb155839fe487c70397740c5832bf28952060bb0519504d8029164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163830 Malicious code in nudela-rahfaeg-naahgsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4db6d7cf98451c36e60a20b7fa92fbfd978ce67cdc2509862faa304b8311141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161208 Malicious code in nabila-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5cd44138f4597c580b4fe5ac070a66c7809f9f165378106d662abed46d0c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165920 Malicious code in shilang-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea50b820c6877739269d066b1497ab0eaea2fa7facaa06924384fb0aa418768e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162249 Malicious code in nokire-akaza37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74ba92e1b8504d30a994cedad89223f81b4d92c4d5ff6ebb25d9fde869a2880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156303 Malicious code in ilop-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840922427064e56918a010f863aa9cd3ea1728ee24162a8c9d867f52c37ca5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166726 Malicious code in teaa-reborn3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32672c055e26f78f68d3852e81636d1fd856f557727801718dee0d52035e55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163933 Malicious code in oalgo-kiulasolai-akiamako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732307c0ee3c68a968e659b5e071a7857e744942645d36ead9deaa77c0cac620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170249 Malicious code in uyifiuza-iytut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c34295f442bcfb36739fc1d99ad8da81dac73f4e0ea18fb7b6dd940a3884d2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153099 Malicious code in avminah-fagias-fimaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce2fae6a67b7f319b7594762eee721980dcd30906928f784102ec2e2cf89cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166317 Malicious code in sunden-dibuk-in1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2315ae90801b05acabd0814374bd780e37e91220f85834327e2da39ea0044867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163738 Malicious code in nudela-agafkaff-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ea2b534bd3526cb156d117b4043c73f0930a7770d6c324a0e642f42efb3cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168732 Malicious code in tealove-reborn9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41eb299d7411df5a51084ba4427c450b3003343aa4096321abfbd2e2215c82c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157216 Malicious code in jurss-zas-daas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faff87e7dcd583ed5ced0f92264a0639646839b645d04f83d5af3f282177e030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158667 Malicious code in lookingan-namakita55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b9550896a6cf96ec37eba809701c1ce1a94f3b6661e08ceb38ee7d050f98fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157968 Malicious code in lala-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b48b7e0846ebeea8222d715cf0ae37b239ee5f75459159729d7c6ee60495486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155019 Malicious code in fatidra-nutayua-tuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199ab5ab00c4eb5653e06337ab4bdd14c1793ca93c22a7db8ada86e80f67ab33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162805 Malicious code in nokire-lokcek5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b807f9fd61e2cb3e4d917ec078a39f743cb44d7869d9a43ad6a2313f506e780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170298 Malicious code in verify-ain-misuau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a50d62af82f27ba37e2913a246a61297ab40f1de7646648f201f96f80e6c746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150806 Malicious code in @miptaa02/kwnhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d045478e07c8fe3cfeabeadda1e69a9a3ce52f3c54756b426c9b26d14049a9b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...