MAL-2025-157544 Malicious code in kentung-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16944b228cc21ad03f29822599ba83cb6f97ec306bf796ad086e38711d6802b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168126 Malicious code in tealove-boy20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681362488b442b43772207696fb429d7f309084d1195b7ef2225495873f15e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169724 Malicious code in uinsnu-loiupomi-kilabarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d1b9c22c781a72b2bb991cb5bd77812d4d1089e59f847c78dcc79e4a6d81a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155636 Malicious code in hafiz-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fa641197b486584229bac8bec6da51485ed8e525a7a981f108ad96d28ec7f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151247 Malicious code in abiba-alvbai-ayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8cfe027f205b758d3dc91356e78cf915de68135452f8b1b4cb4bc5aa43af21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165680 Malicious code in saku-au-idaduasffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da16d01e8ea07c1529e9072eef578e9275f65f7806718a7e959044668e934dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158928 Malicious code in maalasha-nut-beli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40810988b621abddf363e520155eb491e4a25dcee8fa84f23e37581a109d2a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154921 Malicious code in fadila-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150469a27facc5552ff40983b0831a081c55e4ce588d339b7648136b75b1bbdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165116 Malicious code in riyanto-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e281bd0478efa9bef9ea8c4a42734aebf5e24e06f2a252a180497bccead64920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157132 Malicious code in jurss-adsea-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6c3c57b7e68049f97ac0e608a0d648689e6a4db13aac2b09f8123aad49d5fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155644 Malicious code in hafiz-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfde3e6216e9958ffeda4a51c0b2a21c3c6c3884ab56ba21bc481d40ae148cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150991 Malicious code in @miptaa02/tunn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02225443fcc85151b0a4cfac64cdd7de0bb2565f19b531750bc9f72056906be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158936 Malicious code in maalasha-nut-posisio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e0adb48639946bda92df99e5a786d4aa088516300ff643c9db9c19c9ba1377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169283 Malicious code in trevora-cir84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be86b6673227fb62c0ed499ba1843891ccc8c1d52097def5848bc77f9d8448b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169520 Malicious code in uaragifa-afati-urufuayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210abcc797b3f3c8bba0329589767ea72481264a123901b4f6d80ab9579b522a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150549 Malicious code in @miptaa02/basca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f996e88d48138f1a7befaafbb4ed19dee19ff2c30f026ccc7b32386676df2ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168987 Malicious code in tehah-mansat-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d23205304fee7308b2ceca096caafacd38af8df698e88f9cf54e92f984d3284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167066 Malicious code in teagood-lokina96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95edc211489f29062a26b57232aba01db40883aa48c3c42b802590efafa91f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154084 Malicious code in cinta-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c055326355125f056b99cae16d1d32b14f509707f2102b5d63cdea7b0a65f2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161309 Malicious code in nabuf-ogaf-doifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c97dd46f4b7172b6b8da4a233fcb019460d750c992c60a9e56512d7e69da9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...