MAL-2025-170585 Malicious code in yuda-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1380d73e04c8ec46e13353f6d901694eaafd9f8523b6cc795f411ff48b93e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163355 Malicious code in nokire-rara64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94553c9bff164900fc849333a5e0cd5377f216762281d1df92c335781d1235c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157871 Malicious code in kupa-lulio-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f142b4a15df525a746716138523a82e314d788390760cc4c72941bb4b87beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167115 Malicious code in teagood-manaki49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037926695e86e9ae19f2b69eaa32682df0ff87998a29e5f4884e64c2ff953a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150902 Malicious code in @miptaa02/rdagt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dc1c3f2ef6222b62a4cfd19ab4e3284646f3248057ae85ce94aa973c91447d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164470 Malicious code in polymera-manuyat-butiyaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0d6b1d7143413c427313ff384564d90a0e1a4b2843ab7ff3b9145a7329a2b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168810 Malicious code in tear-grass-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005b82f71936058adb3c3890514f742eb6b0ee055f60dcf7b625096826475005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150258 Malicious code in @mipta1/ssseasswsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba81b782feeb018003c9d8892d3625e7564eb5397556027fd6a0ddf356c16c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158961 Malicious code in madan-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3f4c19a0a1def28c3256c5873dd5c58dd33a80259353d62f7e968cf65143a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169818 Malicious code in uinsu-lisa-amianba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cdb849d75cca7cc8e091fa6eea2e5bb1f0352240a4f700c2d8ccd80c8af6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169928 Malicious code in uinsu-losit-duvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018df8d6102a7f32dfe7a533656a19e1e97e1c6e69c71fb4fb8f05def8d39bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167054 Malicious code in teagood-lokina85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a490c418cac18d7add0afe0794f7ecceb647c300540976c52d5974a421064a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161595 Malicious code in nabuf-otoiman-igioamaiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89b51d152fd493a3b46ce8732792a6a8d97792d70b5945c6ce4394fb372c34c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166191 Malicious code in suharta-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07276543d0d09e4156be6b7a6be416e0c5f88f889b957010010d97b6444eafc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150693 Malicious code in @miptaa02/ghggt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd39f36c03bbce4a2a0c7f31b38a8a6a1f06331beeb7e243ec92d0c7a7fe7120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158879 Malicious code in lookingan-namalaka65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4042b5dd5bf91b51d3d6c98247587ae2f08d552f878f0ac414cc670bd346be09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165179 Malicious code in riyanto-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35464ac27795f84c57196f2c80b219c2404934eef0750aec73be652bbc8be8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163854 Malicious code in nudla-ofogifaf-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dcc1c218e8c7efa0d8b9167b930fcb611049bb2d8e729962c519fc12fb6bb7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166062 Malicious code in slamet-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529dc9430a57a407f0e0496ae1be0e175f218386d5b8c6d363a5da87606dd6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161275 Malicious code in nabila-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25e7b5fe276f70245b67ca77753aaebca274ca02ee7a59fa9b91ddd50c42fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...