MAL-2025-153775 Malicious code in bintang-tea27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00dc749976f3bfc7c44c0a2256cd65bd8f8cbcd07832cc996fa9839ed2a969dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162333 Malicious code in nokire-arhani22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c996dc4b75532b5663087c3b5102151c5542c6d6464b609f67f5ce2a541e38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153943 Malicious code in bufpani-muisfmyau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528001266030d717be28abea8e639478a99b7fd5108efc944aae3db4b87c73d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163474 Malicious code in nokire-sekiya80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bebbad4facc784dafb2ecba10c6bc6596f1747698b076decbb090cd21ec0c33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156443 Malicious code in inal-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39c49b9a22d233b38ed77edb552c7ae8bbc46bac1d6e0ca7d1eed98bd082258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160079 Malicious code in manurung-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf05523152229f22204c7aa51252c1524a04ca720f5ed134040e2b8a6480a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160093 Malicious code in manurung-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd68e726b040ba3ccc2844b94c0b18755823a38312c9a5a1ec263fe45f033671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169176 Malicious code in trevora-cir122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b9f4a6258db43f66400fb79549d3e048c6e9a840956a6807053b77b8e912c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162671 Malicious code in nokire-kilua78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e0c2c5df210b193d7b97a0bfd8c1db6c87295badcaa3cb99456debbc124c65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169470 Malicious code in uafaru-tut-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ea21f6bce248ea8307a5fafb2dfa786ef9e5fe944392dc31bb6d53bb6ee3c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166815 Malicious code in teagood-cuekin49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d8204bebb8e6245819059ae7a4903aa209d334240d492a83aff9fac502ebb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169122 Malicious code in tobrut-hentai-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33802908c2a6d4ea1409665ab1162beb505eb2682f60cd4af71d9c043078015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fodmafaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be760e21720f01a36b5e12f89c86c5c7ffde31c48e45ef76766ed9f38b253f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150047 Malicious code in @mipta1/huoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ff6ebbb189999a03f9885a3969327b8793811d71adacde75a23134624a2277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163846 Malicious code in nudla-ofog-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204d47c4a0c095855f503572e0f743d69f43e0480808f4bb0cc853422027042f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154123 Malicious code in cinta-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bad0cdc649769345341178fa6ed94c39b4b695946d31abc4b65b2149555be4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166051 Malicious code in slamet-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd530283b53c3b2b9281bf054fe3c16f583153d97adb73533c024b54bdf9284d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151124 Malicious code in abeh-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a461eb65fd7d7eaaced60d54cf48d4df3a7d4abedb537c2a89a1f2af72be8009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-thfla-magahzfidgboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42d728a7f415fd486cca90b4a696c68be9be147f5f430afe2964bb184f2d443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-itaun1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96eeaaf2932b5605709726621a7b25236cdbafd944e436fd8e4bba06d388cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...