MAL-2025-158900 Malicious code in lookingan-namalaka84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdbd2a891e53fc7172731f1d48aa696324dfb5d23615d0e67483b2a4a52784f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150972 Malicious code in @miptaa02/teddyd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c70d791749ed1b31df69c8425333bce2b45767a7bb7574bb6385a576184f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168771 Malicious code in tealoveness43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e638b4c879d039bb8f50276d6ab2725416159e55ff682f4481e14a3956e890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155540 Malicious code in gurs-muisaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34dc83e469323722db21e158b1ea04aa2b4dd177abca0dd6f3b20f1515134ff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160167 Malicious code in masan-ofa-batouila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7270dfd155c02b9a0dbdafd7f2ebe93415696c4ebb50364285278943e2750f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153662 Malicious code in billa-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c97818d83a489ed7b4e65aca7ecc9317b5900eb8dee40f2c1c0aa3350ff7f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158512 Malicious code in lookingan-nalako97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c32cf99423b447495a2e9faeafe299388133f8383b72ea22511dcfdda4abf917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163606 Malicious code in nokire-zenitsu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fab185e46bfbd09ad70bfadf35085129e638881263faad61d81bd19d59af977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167005 Malicious code in teagood-lokina40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c833f95586ea7251e138ac2d5eb3e2d744b7631ec0509c44ecc6e67cd974e3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162023 Malicious code in nasution-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696491a45d671b04c6ca75d53b8c44cc931b3aa3593cc280512e56d7e427d38d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162868 Malicious code in nokire-loklok17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac6f30b63d7c7f3479527908385681b390f1ab4505f9a97298a1e7b3ef7394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150516 Malicious code in @miptaa02/asadeg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68402810c8bc792755ed852d7fe6c4dc5815bd162744b983972ff5886232b7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152925 Malicious code in astia-al1of-darokika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4020c885ad1c9eaad8ecb5078d065c91e59e00de405270c41c61550d6b2bb102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162697 Malicious code in nokire-kore11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bcdadd48ef3f856234d13c008e25a9123e389d4003c76dde4ee280dd29b3a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152252 Malicious code in alfiansyah-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154c7d0eebdb60809518542fc2367a34e543f5d366f993705ff4d8bd0bb2aa46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152554 Malicious code in alvito-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d739d0582bc3d85f3f27b37097c41722be372e03a275098de79cd7f35b76a427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154533 Malicious code in dian-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb5c8d304e184bebbdd9080540bd8680d77dd414783556bc50d5ca6cd77a771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151910 Malicious code in aibona-mobiule-aruanainio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af6bdd37fc597ef623b8c85c692a43516b37800cd66219cfaee3cb62a97e9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164743 Malicious code in rino-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15570af979bf2047ea4c5d58abd602d1d9ceac5ef00eb68992643fd5db9a403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154405 Malicious code in diago-kamuli-lukak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740892d1ea0542285dd0b6a6ea664edab792f8e430184ecb621ab0eedbb3c490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...