MAL-2025-153857 Malicious code in bitha-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121265b16089b80270e2973c43644944c4c196cab20550188116f23deb65a6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152210 Malicious code in alfiansyah-pok15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da7e62a54982774efb357ca436203e45a9685c54fa187c5439b8a50e3b4206d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169628 Malicious code in ucok-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab41e399c76895f4f11d46f910f6fd4f4c68fe655b2d0a40621024a3efca924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170138 Malicious code in upilka-luzi-iluaoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98aa8af9e6434202bdc43585bffb29ddcc5e207eb5e8e420324939b14fafcd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154060 Malicious code in cinta-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f61d59af7b14e802bdfd6d34d56279bfa4fe093a86b5bb9927a4f8a9ffdd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154067 Malicious code in cinta-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569b6e11ceb6820f54463f250cffb61b923677d0ce956dd8be5aba0e7897f39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167733 Malicious code in teagood-namakai75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02fe6e5b6ba47f69aa45f8e6d0a8ab7d048b4ef3db5e48ac1d819542809e878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161669 Malicious code in nabuf-otomabin-nufaiafoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb553b1442a8dbb9183fc95a106b2a6fc7c61b404ef2d07d59e64f51a2fdbaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158188 Malicious code in lintang-tea3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b24896dd99c2f3b034e9aea97f517db07ca696f3828e2ebbfeb11f46836630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162673 Malicious code in nokire-kilua8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5336b0ee6d0c69931cfb0fbb597b9f45d18a9fc0d6349335ef93a147f6e5c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161576 Malicious code in nabuf-otogamian-djau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87edad86a024cfbcfd294d9c65783a7c10028d0c620e0c1bab3478fd612a6ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157889 Malicious code in kupai-lukta-jol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03857ae9573bede240db67e663ff44d1181a566b0922e4a3ad9d79445c72956a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166084 Malicious code in slamet-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2447eb4b14c2e7978fb2df577e381c0f96c900ab72bc84b58e580a6beb81c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165621 Malicious code in saku-aima-upuasoanmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29981258c1f275c3b0dd04c80d7e507588e64978773d4f16e0655cbc56c2dd79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168741 Malicious code in tealoveness16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6d4226ed7338bd9846bce7bc03b9401ee1a4ae3b0015097a6c43a87357c2e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168385 Malicious code in tealove-naiman46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727305f96caaa9371b4639412cbbbe2669d8d20e662bc99f9246daaf1c0ea5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150787 Malicious code in @miptaa02/kilia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998f6ea335b3017ce6726ed09eed46c779eee0a78c2f0954aaed258b8a93575b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168967 Malicious code in tehah-man-buta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da95e8c7994639b3b164cc8d2a10f53cbd6b3cf125dc5118b4d8ce9c24d12630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168636 Malicious code in tealove-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 058fea5802e622285a08234332cb28b7ee47617b96a4e74e26be5379050cd7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169874 Malicious code in uinsu-losiat-dilaubakabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f305b5b2bb1dbdb9b1e113b0ff3048f3ee6bb57f838dd7a4ad15257a260afc49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...