MAL-2025-164166 Malicious code in pilka-lniu-kanika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d88837d3a016590ffb75a9b84d75bda29d6a4c24ebed434ce2f5b41fbec83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168701 Malicious code in tealove-reborn26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e889b3b36338eed8e0176f8bac8f98b87e640b4a378ab704693f3d900ea8505e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168663 Malicious code in tealove-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760af1fb387a6220d250533277b5e723eccff2f9d231264eaeaba40b77793f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166323 Malicious code in sunden-dibuk-inup1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20fbc79222da108e240e9f0972b55143a869c2dd1646c28094b87628d879760c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168401 Malicious code in tealove-nameka2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc337d1e52381b4df0bae1510b01d69a6d4768b2e32c6799d64225359de32d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161057 Malicious code in musnisdr-terd-naud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a8fc1321606a8e93bf40d7f76ab493d4e49d644a0a3c7aad45b278e4aeadcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154840 Malicious code in fadila-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c221b08691dde9b8c400fd8b7a7ff3d60bb1bca0ec7fe96d7271a8b08cc9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154521 Malicious code in diago-kulpo-lkasmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed25265a90f5c5406492cb3aa14df0197dddf33c46c7bcbd61fecfdf06ffe3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150658 Malicious code in @miptaa02/fja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3687844662ebf897ee8b6ac3a3f5bd93446971d0110e2da08d032d763678d579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152629 Malicious code in analsia-akifai-asuluia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7a384a9f95f383790b95338d944a1ab46176fd6796e5f48fc6d61e6523d500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168836 Malicious code in technical-ain-sulapbia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01362afcc6f8394709f84f6361ada7b190b75359cb8556525b5e278a48cfe760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156889 Malicious code in irashi-2a-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13c83bd84fdf3849858ed0344fbd3272e30c4fca0a34af23e0c0ed0b324f33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162283 Malicious code in nokire-akaza68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39940896dea55f07b1074cfcb855ee2369a8f18d3b9695d718abb2567dd872c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169729 Malicious code in uinsnu-lotaihzmi-kulaizbknisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a09d473cef8f269f60b213584e2a7b753b8abb7f6df0bd1966e962a0650a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166111 Malicious code in slamet-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b79ffee1a798350830767c3205bcc581c398abb2207100afec57e9c6f95ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157740 Malicious code in kuinsu-lubuki-viakunanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc216ff70452bffba6583ce7e8c3f20d90660e1ee29446d51ea10eb2dfd03296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161480 Malicious code in nabuf-otimon-g0g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105201031437201e644ad256255e24e36c3d96899cc640492aa327d012ce6073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166934 Malicious code in teagood-lokika67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed93a1ede3d71ff8d9bc8ffd2af7134ff3931c4b078e388deaed016dca038599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150220 Malicious code in @mipta1/sdada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f538a7a3facd8ff339bc12f068cbcc35b5fdc61bb4b17517e65e814bc3d412f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158034 Malicious code in layla-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013766ca5c7b865b8505d7a60e00c5bc2e412458642c74bf6b0e6c13cfd3a8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...