MAL-2025-158549 Malicious code in lookingan-namakiki39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccfedfd854840a744718d8434dfce00934e21a1aa04182fb8bac3f18c69bff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163490 Malicious code in nokire-sekiya95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a8aaa71d5f6912362009bb4c78ceea11e7044f07dc7ff4671c541e2cb9f9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153833 Malicious code in bitha-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d73097ec80dc72e650492bc4448c8e027b41fe2c9ba8fb61a0dcce388e557b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152815 Malicious code in aril-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31dadeabe15ce092cf3cd168631476c9b6697841ced0aca8a92377e8696623bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152359 Malicious code in alita-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc60c78bc5b784d538ceeab38a6958fb670069050d3d87b2be09cbb58cd4df06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161993 Malicious code in nasrul-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75950ad3b2d188d82e2e67ad33e6403d6efcf7175c8ee87c7559100ef27c321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150837 Malicious code in @miptaa02/mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57c1f5781074eab067dc384349f5e1cb82dc3cb9fdb75ce44b7a13f4acd5b6ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157091 Malicious code in jimmy-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c25cbfde87001f7f45cff8a4b964b8e37be3acf4dbafa93a368f79e2508d764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167324 Malicious code in teagood-nakamala58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa227f4812ca16983e3daadf9ced03e67c212d990b4e92e1bc1bf4cefc31277f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154024 Malicious code in carssa-sadad-sdff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6db8ee7ce4c5ad806a9675ed7f4cbdc2cea526694b2309324343dfbfebcac89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155146 Malicious code in fitra-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4db8d375db69bca5890fbac5327ed467300e07c27d78bd63e4b258ea46fa8092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157072 Malicious code in jimmy-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb8b2234fffb702ad599bf0588499a213818d3ef43f029842206195b0e0b2d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167208 Malicious code in teagood-nakama43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af3594a9309fabed1ba3afe50627bf04e671f86af6e645f2ad9b205099b93b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165219 Malicious code in ronaldowati-cir15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 249ec75fd627701a16551d1e5f6cf3fa36e241edda5439c3fdcc97deed748db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168536 Malicious code in tealove-nokire1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d5de4caaf301aa0ca9eafc1daf4746da6621409d8f22f34a6f40b81bebe023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154068 Malicious code in cinta-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920dd8002ba26f8d2c4a8ed0501d3f21b13897a1e5febe8cb88fcd263d6754d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168627 Malicious code in tealove-okta48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34ae56bfecb34734f8b819a6a48c899c9c39143091eddc886e0fdd41ad5df7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166329 Malicious code in sunden-dibuok-inuil1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec598b8164bd48ebd381b37ccd425e92b50da9f4c02c14d7d4b037f2eee3ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164579 Malicious code in putri-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22c443ddd6ed6440ac548ff86fb08571424413aa7d37a080003d5a0fa78c35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166094 Malicious code in slamet-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67dd7f7c867cc93b0f35859b4b5bcee14ae03d1272d85290c61b0128a4bbe8a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...