MAL-2025-164947 Malicious code in rita-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98113579037909070c6dae22777de4b62617f7477f6c4223203a022ec5299405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170025 Malicious code in uinsu-loti-nalasaubalui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67a9bba69cf09545f4daedb372147aead2d2af0649a2d79d74edb3a7c4f1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169149 Malicious code in trevora-ccissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08cf1200d4732b647c13c49fa5876f223b91acad0da4a18cc42f7930027b250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160686 Malicious code in modirai-igno-jinanaguha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8f21331d1e6e8ac53936f66458ffb9df5b25834c4a1d97ee807a3d224facd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155643 Malicious code in hafiz-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf889801409aee1e60b80c203549aeabd564161769b68e736c6ea46ee267145d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156976 Malicious code in jeep-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6efdb4aa65c86e7f336b64317b7c1534fd6718150c7bcff0b6369829fd31d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150598 Malicious code in @miptaa02/ewias (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a60cdeb026fe07f6c79c157649ac670247c4b3ba010aa610b4c931018319c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166452 Malicious code in sunderlan-uyilud-vamuikusuabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16def37420421af35dbcca7777dfbbdb92692817d4a9826eb510d4fdc87ec89d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165129 Malicious code in riyanto-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4cfceeb2e1623862e026e34ddff93a39ed48098886c041ce572d52b5836cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163952 Malicious code in pajero-cir5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521ab429e374acc7551f365e1a4550aa89fddae6f599e0f3680176b15b05dea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166741 Malicious code in teaa-reborn44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b66a5253ae142056a46c63faa1f05dc9346f8271452e66a273e3b5af89a0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167475 Malicious code in teagood-nalikami72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c043f478434b04d74e0c6c96f42d5ac169ff9bf84a1cce6cb72f33f90b69ddce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150327 Malicious code in @mipta19/ad-ajfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ecdfce91af87f13c99ca475201bf32cca8be1bbc2813af9be5b938b25e99e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152703 Malicious code in angin-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa54d548b553e543feca31f2c2fc5f6666db7d6220604cf6b489101f97d8801c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165712 Malicious code in samehada-hzhs-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34e896a3d0732cbc8fff3abe8e6771960d3e65f8f8c850a709a81bf715da545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151622 Malicious code in abuni-niia-luhubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6df9f5f9ccc1b47dbc595ddfb30b9f030e8908c5ccfb3dc7ed2306b8a334e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164795 Malicious code in rinto-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50fde11e2e7056c2e680739f6fdbb0afe2ef92cb08d4ca5f775091d387532c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161306 Malicious code in nabuf-ogaf-doifako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcc4006fe89a406cb940984d193171b085028aae28f672b5e055aaee5331f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154750 Malicious code in dioalgo-klp-aksaubali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348eef027d3cd0d9ab18b4c205c540edf3e444cb4007e9567ebff7f7ab60709c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160057 Malicious code in manurung-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d892bf0d6062251938a00dc10a17b676fdbf6d08843b02b71cc7f852616d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...