MAL-2025-153328 Malicious code in avminh-afai-fafoaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b21b8e749a5e79396e5a86029f7756e35d8c4f0f8586b1d96c25671c3b81c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166332 Malicious code in sunden-dibuok-inukilo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c620954ee6e06516118c3f34f595d79af9e81dd3242425e0d44709e88ef8858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157029 Malicious code in jelek-r-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee14f533151602d16e016866b4d443fdb28b89c357a26f9f9402b6810235a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150047 Malicious code in @mipta1/huoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ff6ebbb189999a03f9885a3969327b8793811d71adacde75a23134624a2277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167796 Malicious code in teagood-sukuna42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46de616e1237d921e37c977dbbd574c7cf65b8a018731e758f3348ee633920e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169335 Malicious code in trevora-pisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b32a80dd3859367bc4874c07b1f081de4cb2c173ba9817f2db97626016815bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167970 Malicious code in teagood-yakuza14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f985dbbf91ed39542fa4a078815ddf2589f0915b4701aaba61a5722a7d6591e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170369 Malicious code in verify-ayca-amaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19610e207df267ae6948652a29a67e979102ddadacc80bfb7b2553f295efea06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158852 Malicious code in lookingan-namalaka40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031b79cd2cfa29ff863d583f164fe76150876287c7994929d3d978475371da29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166566 Malicious code in syahlan-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da351ba959ce2a568c7f72e68928788b6f2b1b63a81e1cc8446cbf8478f7e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150616 Malicious code in @miptaa02/fda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31cc0a07ab7e010bddbb4a38be21b46d342615154ee4e6089d919ccb49a44cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154396 Malicious code in diago-kamoli-lumahoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa615f3db7877cd6ab5b0e3b1491e20523474597efe63579686ccd2a8f3c9163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169470 Malicious code in uafaru-tut-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ea21f6bce248ea8307a5fafb2dfa786ef9e5fe944392dc31bb6d53bb6ee3c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159941 Malicious code in manttu-nuyati-dyrsffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9669611dcb84953ec1657dfcaf85117fcdb9e7968caa158bc7a05f4c7a1dae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155295 Malicious code in gifa-ota-uofigafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daed5ef28fb11d9e25a4410df9f457b419e8d75d9d3f373cd16228cbf7d0ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160215 Malicious code in matane-c-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8bf6de177689550dfd963fcbb0baedc3dfab17caf0fc1314dac22913505f947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150753 Malicious code in @miptaa02/iris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9c22ff81e77e698805918dd5f2721f4e72b1161a228174829625792c581eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160686 Malicious code in modirai-igno-jinanaguha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8f21331d1e6e8ac53936f66458ffb9df5b25834c4a1d97ee807a3d224facd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170025 Malicious code in uinsu-loti-nalasaubalui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67a9bba69cf09545f4daedb372147aead2d2af0649a2d79d74edb3a7c4f1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163771 Malicious code in nudela-gagagaafh0afhf-gafsafoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33516ad4a113964856f6c06a665cbe2e246314ec3c4b12d251a54fb95ad87161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...