MAL-2025-156077 Malicious code in icha-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8627f416efc31a2e59fdbf00d31d31a9369a3697ceb868346b455c962991bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152645 Malicious code in andriani-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95a6eecde97b06dbd1b7eeba070103fa4509585f066b946fa73aa587e7e1198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157604 Malicious code in keyla-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da23cae79d147fde94f3217aedccccc163641964e9802312a10a6bfda017a42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152514 Malicious code in alvira-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdf5c21567c2f4b0b2c7baf808d7baa5b381b53b243a7b933dc533ea3ad368c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150952 Malicious code in @miptaa02/ssghafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95391f099b0f6d20a2b6c2d124df05f7a9c7a80e610e16df10a620698b4b8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162894 Malicious code in nokire-loklok40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666ab270b484e3fae153648ac5417f28a1ef7dabce23c3304132305f1ce33bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165259 Malicious code in ruji-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a12aa0d66e5b1c890849a22f7e05be96006d78cd9d0dcff24b8c413988e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151064 Malicious code in abang-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385349fe09696a89c21db68cf49ca78bbe9a97ecc18ecb7334820428a512cf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158272 Malicious code in lookingan-konami14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12f509606f4674588bf93fec6a0227f38515a44afaaf82ccd2920f83052eea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158148 Malicious code in lina-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24115464440ff7d1669f8b8b2d9bb35f1a0004aacfbccb7bc67b229cebe9667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159894 Malicious code in mansila-toaviala-madoibsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d2f9411e0bc3880cd7ec26feaa22d7aaae7db93d1885e1600545b70685cac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170202 Malicious code in uyafu-tuyadat-datut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3edbc52a7133e4b9240daef7a21cb47b4dd791d77cea7f301f6774e024be53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161382 Malicious code in nabuf-otgaf-dafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7c930825f70f971899cba0c74157f3fb0c58d6ea94f7d2146d7b02b0cdbea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152267 Malicious code in alfiansyah-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93831bf7f2833303c1310de0bf9551346d8f6bb69f9d34896472e66914417bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151707 Malicious code in aciaigu-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cf83dd01539cc154a7a940eada3478d3d005a0803a9d20ede7c6b8f1f4b944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155470 Malicious code in guras-visa-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0879637fe180895f23e5318ad9a2fe5df23fb7eb3618efd65e9f71833580b945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167224 Malicious code in teagood-nakama58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656b8c1317a2b80784d2747de97edbccefc5418d0278fa0d920be397865b44ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165345 Malicious code in sabua-muhay-tadufamafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8768348ddab7eee8e8ac603e208de9a683daea21423fdeb8cdd040fb7a4dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164857 Malicious code in rinto-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1106643e2dafed620e1a6cb0b45e98304f170cd849e55fff040b1efe41d05092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160335 Malicious code in messi-sdubda-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9567dba9077b6d9fd87caf316f7b337cbc73ae32686c6547ba2fa7f45a1b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...