MAL-2025-158500 Malicious code in lookingan-nalako86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd7077dec104d478e43cac8058c4070eacbdaaf3d6494c80ae09d63809df56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158156 Malicious code in lina-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8099bcd5e1e62fcc5886782687a6f40588f4160514f17b190a38b98821c8da6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157536 Malicious code in kentung-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc7dfdf7f6a8a52e0a0208e753327df2803bcbdbd8f767456e5b4dfbb96c1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165549 Malicious code in sabuoa-muyafig-budfaiufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c29a9317a4eff52ec30e97f2aa5ac8297f706b5c766605049d146b14e22d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169784 Malicious code in uinsnu-lumi-kilbrm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca78c0802a2947cb57f1280fa043c8f927bca11e53a8e37aa14be9788c156b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165221 Malicious code in ronaldowati-cir17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f308267d51488d13b5f3e7f382feb43b233c899104ec4353d9b5116f1657532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169064 Malicious code in tehah-nuyadtasfag-munr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65cf37e36680529f561a65424b99af2ae692dcd690731c0da69e0cc056c1d8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c05a7b56d50932ea5b5626014fd11908520bd6857e1634895109a4c261a26cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154112 Malicious code in cinta-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512bac0ca01f1d052dd95965f36348cb9d06ccac2a343b2f9dd7642940d1383c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dd5f585b8e286d947e458fe4b771e06b093b6a6a252a51f7796f0347d4bba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166855 Malicious code in teagood-cuekin86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a6731e5e1f0e5824660d25c03986de9d4069d41442d4f3ad37c98682600509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157076 Malicious code in jimmy-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979d479ae59276d9e0cb4fb4d8eff17cf74d619c619b178328de02fd0ae7b031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150043 Malicious code in @mipta1/hdftt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e6cf8e94375788219711b3acdde8aa859053a4ff314a36a17cc776ae9d4f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160395 Malicious code in messi-urt-efduds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8a449ee822a9d43ef7d2ad18a3b790a5307433f1b3fdd60ad6ae16c4eb8467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152749 Malicious code in arif-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd3ebed6eec632c620c374423d4122bfda4ce28a65e0289a567cda7efbc7bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167883 Malicious code in teagood-yakuna26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b88ff7e5b1ed06c2c0c18dc91af9aa9038b30bc2925c0b48ae3d8b6f4ab3981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-si-fagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9cfd7558b0f2e613467ffec57539b1fcedefb8b02d4028fb662020b7beb022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bfe97055b26c235e7f2e691214f8d6f1de2997df1cbbe1588fcb11188d5b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c6d839c41e0226ed599e1c355e069ddb709883a3586d70b64c29fcf603d64e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4bc3491c8f5ea1f5b4d70d11c7c5f08532fcd0d83d8053d3e5c209964bed3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...