MAL-2025-154439 Malicious code in diago-klp-kalouubsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2737725f60a49620b3b2afc3d0f605cbb52426358bfd8199591e22adb969fe6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161154 Malicious code in mutr-sds-basta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e653c09560e8688f36e4c3b97dea353a462611f1256f0e8b452402c70b4a28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163866 Malicious code in nuilava-dakaogfrae-nffahaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298a18697a04d1f84e259570d5ed5f38d4e14368ea6813287fa271a4aeac5c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156669 Malicious code in inufgi-gotma-anamufozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d982c6de76de87e1adf14f6069dbc6ec6e69c64f7047c7478b50e12f0ca7736d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157962 Malicious code in lala-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f51043a409db5493d3da7924d41812023b719c72c7f4775e667a55c13e15de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153988 Malicious code in butrsui-muiko-mutyooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0792623affa23f58116447a54d31129110e3b2ede7f0fa3586bb207286b1bfa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161356 Malicious code in nabuf-oguof-dusagomof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0560fa902387ec0abe08dfb200216f80fe27360ee2cd8b0caedac937b87f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155962 Malicious code in ican-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef676b06f9f9a8886a6298ac13763ff32478d8310363895b172282ec2b28ce4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152322 Malicious code in alita-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1232661d0c4e39d9e827d005081ce27502c82d3ccf255eb5391283d128db1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150991 Malicious code in @miptaa02/tunn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02225443fcc85151b0a4cfac64cdd7de0bb2565f19b531750bc9f72056906be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162870 Malicious code in nokire-loklok19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f55c00be90ad8a2a531940884e53d89af9c9ccea2c6f2668eaa7c07eea5680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156692 Malicious code in inufgi-gotmua-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d940271bc269c0fad8de52a7fa924bb383b91bde61abc68b596cf6ec4637f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161291 Malicious code in nabila-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42504cabe925b2f85e0eda06e89a03349bcc3edd0c318b21d8f03ba55e38502a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170177 Malicious code in uyafru-tufadat-darautut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046a652c676cfd2f219e48633d99675327ee4abf47e80d41e6e6135973657f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160264 Malicious code in maya-teadf-nutradfuaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230a51defe1a425a3d45c9b1f482beb0157938a7acfc0095b8ce2e532dc89a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170028 Malicious code in uinsu-loti-nalasaublui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9afb64998d89fafbec7f3f31f401fcf208ec62f5e7c4226daff28da85e9c1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153004 Malicious code in aviaah-afgagaganfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381cda565bb424edb6d491d7780e202ba9dc1ba4df568eba9e9da976d798b812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156977 Malicious code in jeep-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704caa34bcafd281bd5307c3fc705cf4e66590a44e21a3860a17d91098939e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158951 Malicious code in madan-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1696e30580f5d7c08c3dd40bbbc04e284a5c7d0d211a26cef9f0dcb6529fea48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168122 Malicious code in tealove-boy17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1953f026f62b1555c32d395a28bef9d55cb678826a69ac9a34cbe228a8b33b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...