MAL-2025-156971 Malicious code in ita-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd9bd195a2b7675d8027e54c1d41bf50419b7ce081643d57cf1056d9fa2e707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158336 Malicious code in lookingan-konami72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1419d07a97b65a9914796e9ecb451320ad73bedd56ed4c60e2092680c5a4a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163167 Malicious code in nokire-nana16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372172016fa75bb0a22bfe913bea2c4ef48c1bc6bf1920668adeb5f471a6f59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150280 Malicious code in @mipta1/tsezdzar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00328d0898b516e7283207dedc2993f1703d1baf557f888fecad713027b3210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90746f0bef3a0527f9191d65c1bf7d6b21784d5768180a30cc5acd00154f10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163984 Malicious code in parwo-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4edd24f78df749b1f9dfaca50dc09ff4685efdd095442a101acb7ce84ab6b172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169328 Malicious code in trevora-misa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4e32b1e51cf61c2c896f5fc2849cc9710eab071e92ee87dc745b1656cc8442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162885 Malicious code in nokire-loklok32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf974dca97f88483299d85096ee75dada739746a715bf1cb71a145f9b38124a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161492 Malicious code in nabuf-otin-afofagoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3422a3efcd8060fdda3367c60968e2e2c98f9154c8734693953642234c0784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159644 Malicious code in manda-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab239ebd7a81477b0f4fab871deaf37e558da8dae009db1723fa4d227673028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164869 Malicious code in rinto-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a05cd02496ce60eb8507ddb8baae9fb8500aa47f93dc4e127d641b1bb2a601b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252742fcda4829fe98628c1ba696f7e192bfa41c0d0dee87e0741a93cf8b4faf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156945 Malicious code in ita-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855f7af76d87257fde0c9e812c51e8f12fe6cf65181de7b32ca8d6d3e6e0dd26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165399 Malicious code in sabua-muhyu-tanadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f4be8fcf8a371d4e0dcbbba4a816c8c732e6be3ecec6a84c8e30c43a1e7b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-udk-vauki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf82f385a59988c6e07d84bfda35cb63d8a48b534ed9bb348c0a09e1d2d492bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d0bc7b326c1ae37612d90ed12f4b1dde1c1fc90d1b4f5470d71460dbea3e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162078 Malicious code in nokiragne-aai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d0aada02833a9d4238e31359e16043e4d60bae4b6f6edec329d6db62bf5830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162834 Malicious code in nokire-lokcek77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8882f99c22d3e64007da5d235dcb77a55768ee0d516f65167be87148b85a471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159515 Malicious code in manaf-assin-nsaadsbsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d077c5ce35eec685c86cf364cef410b0a2895cc578ee199a0d479b547fac3a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160775 Malicious code in muda-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9462ee192c58f365b64b4c954d234ad675e47269748e809c9f36d11f48aeec0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...