MAL-2025-160399 Malicious code in messi-urt-eu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d725d9b68067156972ebebfdb9782048477ab93d4e0a9957cf8df89df8d96dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161423 Malicious code in nabuf-otginaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73132b3844e2f34159f77b9127bb63c395e83590d3328bc2a972a04a3f621fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159542 Malicious code in manaf-natdudi-nuatsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc03dbd6fd2aa402b568470471ab2445c7f1e8ea6a2f237f773139330ead657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159781 Malicious code in mansila-tdhfla-mafgsfdgghjhghla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313a4f74e26e481785fa14edfeaaeebdf187683f6fe8bb9be8a5222252a0c5d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168222 Malicious code in tealove-dana17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51da80787eb91af010926bc3aadbff0af2cc2362f17e978b148d260842970fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150823 Malicious code in @miptaa02/meip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ae0d5e73fd64d0bd913f11b2f38e7cae10dbe76db4b3011a4c5b89f9107cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150593 Malicious code in @miptaa02/etd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db96ee6a4d64131028f0e8eb4d890c14ac717f19978c6356d9e54acb41060602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161653 Malicious code in nabuf-otomabin-nojaugdsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b23e3f9a2d835907d2b558ef8afe977aa4f19b0eb43eac326dfb865c57b676b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166590 Malicious code in syahlan-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f41dae2e6510d6fe8532de0f8bb8aae96f84cf7689e88901682345cf6acacc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160957 Malicious code in munisdr-nserf-tersd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f874e9cf70e6a67669a6cba585f0e3c389be66795652d43820f08876bccbcd9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156978 Malicious code in jeep-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbdcd20d4a5118e3a20196d51fd8468be14fc4e0f4fe5d79ce3775f92d8d9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155694 Malicious code in hariyono-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f251a0dc4394d7a659b1d8c624e6ef14721b05547bbe145f383732eeff8ff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157888 Malicious code in kupai-lukta-joali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f703372c64e0a3278ba427eeb9b55110b6c38ac55cd87a3737d5af978c490a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156522 Malicious code in intan-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de176a208ceb5f1d0ca512530413406ef9a21c546178baf775ecb31712ceae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156106 Malicious code in ilal-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96dcc1542f3f4bccc28596724550fe4d5512f8a89befd21471de4b06f6fb5ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152961 Malicious code in astia-alaki-maliafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60fdfe3158101cf51e8b2c12a7864ef689cdf0d58badb234860b65bab28dd326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150964 Malicious code in @miptaa02/tdaaqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa305514514eafc4277ef3f90cfb04ea95f4e4242a3ca7b793a9409ea84cdbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164851 Malicious code in rinto-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ffccc9f334c669f14f9eefecfaddda49fd492f8157eacdc3cab93e4fd3ca72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150715 Malicious code in @miptaa02/iagf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 712c5ff264be4f3ea1cbbcfdacb6b5cdb7f275828e5cb441bd597bd666ba8877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169632 Malicious code in ucok-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293044cdf88d88ab9c2ebbe083f9185fe6c4b7f30a8408d8f4fbdc03687db481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...