MAL-2025-159858 Malicious code in mansila-tla-mala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5099cf8c6722bed29c6cb56f6124ce85a2eccc22dc6a6e9eeb2968afe0d173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156385 Malicious code in inal-poke111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0db54f01656703960b6a16d9ba209fa9f399d2aa04a3ca3711404aec095f3ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165635 Malicious code in saku-aimau-upuasanmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21e54cc212c9c095463fd8627ca49d6c2dfabeab030b28514319b2446f0cab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcdda1d1d325c9942503b53e1d04e12e0fdbb039cf5e5ff6e665b1579ab2392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168479 Malicious code in tealove-nanami49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e551beb5dfe2ba34ffeaca4254de4229cae4c2760bcc6f31447ff870c4b8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce31525c76fcc2147de87f19fb8d71081764813becdcae501acc7fc51d453b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojafagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cdcc1152b92f63a4c39f1e24f3aa80963fab662bc085afe0c367b090de8d89d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167414 Malicious code in teagood-nalikami17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1faaf3bda164e71caee3e0809d6eecdd238ecfc1bc2c62acea2607824d134377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150166 Malicious code in @mipta1/nhida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8529c92494ea971aad6653c19b801f9026ab88da1b4c546d913b2f7122c00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154336 Malicious code in dia-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1a863d6f0638ca62efa765355bfdd7e9139bc40b7f411125cf07a0f029915f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milaoa-dudio-nsastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4637454e7445940ffac0df464b2c625b3eba7046e8d311ca16b65bbd0a8a1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155414 Malicious code in guras-nitroace (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0ea8009ffa712c60ea4dc2ddc3a9d2f61610fd74de8f8ba86307d9472ee1d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151861 Malicious code in aiboa-molipie-aram (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88de3d461223ffa5e4f2cfbf749d7801fba3a13312143c7ffe34b4945950d0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152440 Malicious code in alvino-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9f7e829e7370774c662c6076b559208dd6472c853a77a4b1359e4de738889c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160207 Malicious code in masiolan-ofamaini-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fa02c08d3a682e45f7471d0e5450fb22ae523967fd15b55a2553730c4786f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169435 Malicious code in uafagarug-mide-fdtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d65e45de4bcee953a508aba2889e2ef3983897bdc2008364764733fb3e9a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150785 Malicious code in @miptaa02/kii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0959beb6f8fa6d3bf3adb719d79ece4c3d465d821de5867bc0f2ceaf4d21bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154504 Malicious code in diago-kulp-kaipasinbauko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83615afe0940f9a74512123d12b3cf404c93228b352379d15990fe2275ba3295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163846 Malicious code in nudla-ofog-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204d47c4a0c095855f503572e0f743d69f43e0480808f4bb0cc853422027042f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c2b6c7f04f65716c9f3cb936474600d98176128fa718f4f0886edf5f7bb74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...