MAL-2025-154811 Malicious code in ewa-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18996625eaea5a66117e7beebe129a5473ce87012add369719563fc0db40c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150851 Malicious code in @miptaa02/msda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd91cb98351519a06778ae6cfb651dcffe6d96c82cdda0bb4619ca0b14ba3102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163124 Malicious code in nokire-namiresan69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 246ba4e135974c3e604f8fa16a0e5f09c3d7d7c0b215fcaaa74f7a0ffc82345a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163803 Malicious code in nudela-ofgaf-gafohagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100226555d0b4a91de69298c3fff2af9c9bfcf2851c9e26918435378d67156e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166490 Malicious code in sunderlan-uyud-vamukualaiabaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8d2416695c637ae567e5963f1d2063a0d6c9c1b57148274f1b3bf4e78f1741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169486 Malicious code in uaragia-mudia-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08770485893317cb4411d4dcc84b196807b6ed75d241e44aa4d32c3b16c8e898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152063 Malicious code in aji-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c5db969213a8c84c67e3baa0096f578d79c1518fbaef0bc8a0b87d45d9ae56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166987 Malicious code in teagood-lokina24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c657c576148dee0a6b1c5bf61abe7c11bafb38a4aa5fca56f6e865ac77172028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156412 Malicious code in inal-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad669b6085a79e1ff2f9920d09cd7a0177fc3ce85c7f218ae13814f8e50a4848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162506 Malicious code in nokire-genji2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c771dcd6dce7eb3f7ad84fabfcbb45c3850b77c08542202328cdc3e0b6ff7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160498 Malicious code in miracle-diook-ujaaik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b611a6c5f52dfa98616543a9bbc770ed1136e4170acc94076da11713fd1ca5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163278 Malicious code in nokire-nanali26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9af8aa8860239eea73f6e1e367dcd4739f5d81d25d70c37fdd41e7521ca87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150306 Malicious code in @mipta1/xsdsoopa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c45d0172a225ad4baa3d4b5f1919afb7f13085c0df02d247d193f89dfff75ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158610 Malicious code in lookingan-namakiki94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2286fa3a25a61e5db84f24eba48d3aafcf7b09cf273549bf2505c7f6eccdb25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160715 Malicious code in modirai-igono-jimaifagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7e72465aa9bbdcb11ea584b99737462cb0f8ed218082850a8c860204a55a27f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163677 Malicious code in nudalea-fofiri-agobu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 187426bf0ab824e46a809378b3b80442496a6f86944b8bc8a786abcc3f6a6953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158899 Malicious code in lookingan-namalaka83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c833afa26d62bc8e78f416a19539526404105bc260ff5d2b34ecfb9f927ceb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169184 Malicious code in trevora-cir13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a52e2724bc58cfdcfb2af10a0771ec66c3fb59d892061d28d745bc49cac7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156571 Malicious code in intan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3352e16327f7d0620ee9a4109ccc31a3d9a7b5d62998327471f46c844efce44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163051 Malicious code in nokire-nakala93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5197827a4f629f1e152883e7f7128c903cc7614851a3612db4b5eda3611aa549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...