MAL-2025-170158 Malicious code in upilka-luzmu-kinugijani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f630d4bcc10aef7491d780efdd50cf5c0ebc389018370df66ce18d3b38fdb09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157774 Malicious code in kuinsu-lukoi-knat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a41a200ed587fa3d42ea974d385043fa7e8ca92c65833078d41bd09d512fe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161912 Malicious code in nasrul-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb729461bb6f951428f93e2f15f6bf658b1b5363309017f60a85109b92b2ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160853 Malicious code in mundya-misptasa-asda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b40625bea5d556158f26727eaa4c80c403137cd89cb5445e0f94a2bd54d9e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155186 Malicious code in fitrok-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f83cad36bef348c847dbca8784717016253c6982f9bb01ffd908512dc721c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151618 Malicious code in abuni-nibaia-luhubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33e695cb74fa5c14bc245c481a28effd4f530daf371e2a7df356b0e4e35c1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157309 Malicious code in kamasada-nuatia-veasotod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68df38ec0df227c252da78a3c24db9d1ad4810dac6247ea501ddddd6d31f97e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152308 Malicious code in alfiansyah-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47167c39e7df33a866b9974d9ee6431a04b4d9e9c9b817e73249d85b5bc86bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153974 Malicious code in bufpani-myau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d5b595c92144b889280be2bba44062af9e4a4be2d42ac2d88d3666ae0ec39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150204 Malicious code in @mipta1/sarasas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3e642c6ce2d290c8bb3c2cedc2ae212f99136be0a45b3539198735557dc864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150608 Malicious code in @miptaa02/fahg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c016b6e63e41e6e44a3b8d1b200e16ed6784f28c98ccf8e28a4fe8a0ccbd26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154999 Malicious code in fatidra-faradda-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1876cf3bc90c481fcce39514b9ff52414343b152bbe8f878251aa4c551be0eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153357 Malicious code in avminh-afais-fafdafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df61ddd3fc774ac1caaff62b05bac5970f03c1417d5e0efc2daeef0fc2e9fbe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155095 Malicious code in finish-sf-mewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7e82112ad1c5f40949b1f65e1e04db0386e5d9d24101e4d92c41c012b4817a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164312 Malicious code in pitra-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac4e12f60bee73d64e5f6198086f251d11d73d124b0de077d03e4d8bc6355636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156328 Malicious code in inagi-vuma-nng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f24c0f5c4aec0685c7480ab29d19daab06de2b4c8eed33042fc569338890528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165231 Malicious code in ronaldowati-cir8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc65192f70eb03390aaa2274cfc3d17d0ecf529bcb2863fec19b9ff930b8695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154917 Malicious code in fadila-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0d7bb81264e04ef60db836f214e6715344f5913389e527455435b5c87b853c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153298 Malicious code in avminh-afafassgia-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5609f68c4839ca604cea62d135d8168e2fd9ccf3ecaaeccf44285f366c2b38f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165091 Malicious code in riyanto-107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deafeac2528cff227f320fa0045a290a690a24bacd51dc09346858f922f67ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...