MAL-2025-170098 Malicious code in upa-lubalauvalio-ilualsgsdfsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbaceda6520832936bdd3d76e731b8552c2f0f9b9fe5b9db7a02e96af2e4f599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164574 Malicious code in putri-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091e7483e9d98a6d86557e92f336fbd1b177847dea1cf99bf945e9521724d8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170045 Malicious code in uinsu-lotsi-banbali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0cf28367806b135a35e8cc524c832b393a4b2c8b91c0156a234b7cff9dd130b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166160 Malicious code in suharta-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9c811733411efa64f45c86c481bc795a100287c98f1257251ae3951703752af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166370 Malicious code in sunden-udik-vam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f80b426ce5c85fb496723475a024b433eb50a181b2af078564461ccd7abdfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152546 Malicious code in alvito-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0072c638a4dd3d63be726b44e6756d70900f4e82d028ee7ad0988374128eebd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149958 Malicious code in @mipta1/asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6baafae6103b4d52636c20e9056676fa2b0051f41794b09ed1793be325776a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afogffi-faug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a5ff89755ce4c28f79db5fc6196aca8a3d1b0c27dc8e66097cbae819606d60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153380 Malicious code in avminh-afais-fogagf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ccf6129d28b459a88306cad93490edab3a910e78efb48b480b723c805c4d08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164892 Malicious code in rita-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8820102e6e8873b621daf1924f0268fc5ec3436a690495f27a5c6f94f4c9cc10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152002 Malicious code in air-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3eecbd23037d7be05e575d5f74ef289d9a18340d23cf9473ca5cc5d43000e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159957 Malicious code in manttu-nuyati-muniadyrfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a2b68356588bfb0d4550d0507f371e6c626a57231e2b46fed86bd206d171bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169354 Malicious code in turisna-sgsd-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765f2fcb62caa592e0babb0518d2cbcf117bf6b8d475cedb8b29065f4cb27b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152208 Malicious code in alfiansyah-pok13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a9900ad09d202491af9d194461aec4b0ac531ef1510d260574fe819d81adb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169608 Malicious code in uarg-mthai-suftaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0e0de467ac283c3460a288d5d083ac7458d3ac8426d223578995378302d87a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150816 Malicious code in @miptaa02/masia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c06527ff2e88ea7978484ad3fc871e2483137530995eab6b047f8f0d87da6e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168219 Malicious code in tealove-dana14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9338b3ab86b07593a2d3441af00d49469068348088faf23a2cc6d738b3e555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169334 Malicious code in trevora-nisaa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e79b3f1b5b64a869bd0d90b04800933f2a3926d438398dfead0cdc09c24a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169234 Malicious code in trevora-cir4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4eb22763416f5dbaf2ed2e8833eed84c75b33ba9f2d637a5ed039580da25a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156457 Malicious code in inal-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e719a49bebf86465df0d34db4bf3dd5ba781d8f6fc77be02c7bb70545d13da29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...