MAL-2025-170546 Malicious code in wulan-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93987de569b8cdd1e70b0a09a8877ecaf74544231825e5a4f6125bb9a3f7a155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163072 Malicious code in nokire-namiresan21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca032ec77b40ed3505641403db8ae3adfac90238dbf54f6af1bd7de047a55a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168122 Malicious code in tealove-boy17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1953f026f62b1555c32d395a28bef9d55cb678826a69ac9a34cbe228a8b33b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161696 Malicious code in nabuf-otomian-nosusuadfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9120f5c05398ef098efe01a1a249e6bc16954c2f54e2381b3e0a992215284e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150861 Malicious code in @miptaa02/nisaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee5505648f610fc62922db498c5e95cec1f4999f4781ecd6a4690353bf27c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154555 Malicious code in dian-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bada65aec117c2fa20f8d736ce56390567e678c00e67bbd95b5e8f73557c3471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154961 Malicious code in fadila-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5e1adc0b91d83cd019f1e8fced30bc4eb617a065a88db4f0e4edfac62ef786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167397 Malicious code in teagood-nalikami123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5876cd6ec8931286e83b63549bef1992fd1b12ef8bff32284bba9a548d74866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167009 Malicious code in teagood-lokina44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df87b8c0527ce007cc782f29e7cb9ef17acfea0732d2fe0e82a0c80e770ef99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159556 Malicious code in manaf-yuki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d5b8249276827d9956620f96cca2d7f95d5c5de7dbfb10f180a838aef055c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151450 Malicious code in abiua-mobani-atayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c69b246d0633aa691a03acb6313ce3d19220d5df3f61ae05efb5004bc9f4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160243 Malicious code in mattu-muoape-butada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ff918874811cbc1f3e83456425eb822ade2e8825c098a0ea3133bc416fd6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166984 Malicious code in teagood-lokina21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8239a7d9442d50a16bcd268480c772add8345c9389a2506111c3fa172d5ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162193 Malicious code in nokire-abimanyu76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b161e90cead3c2cfa5dc6f8a32b9edab02c2df65500746756f5d2913483c9161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166172 Malicious code in suharta-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3f4d9edabc7cfffe1240a92c0717fbf719e22d5e72a8d6dae5acb0b316a195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155064 Malicious code in fauzi-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f141c896cb31178ed6e348d151e4baedef32716c482ecbd5181861a873587d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166391 Malicious code in sunderan-udilasuinasak-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 341f06680640d31c9ad47070ddc20bdef0cedb59a327f9fba6112fdede9b8ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165042 Malicious code in rival-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616cdf8e96a05653cafbb993778a6ff88bc6a8dfa9ca39d94095dcda5c92424b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152842 Malicious code in aril-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4909e97a9b2ffb1fcfaaea7df09c6f7df2278e1b199278fc5d7ac88241cec4c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166654 Malicious code in syahmuda-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a709835044b936373d744513d83d964dde14a3b08eb23e0c26ab5a92eeb39b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...