MAL-2025-161268 Malicious code in nabila-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b875a15022be94142501a10ce663ad04fbd6dafde65e824dce5ec5e8d76cbcb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149931 Malicious code in @mipta1/ari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddef82ced3947f67f8a474ba413d7e4f576c311cd41009e7cfe8a7b9550cd1ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152485 Malicious code in alvira-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43edec0f9a295f18e1052e320f0636709c4e71a5d9aacd0f0b6ae3983b4ba260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161715 Malicious code in nacho-bun-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19bd1e5dd81dbc9bc593f86b55385c0b8a770776a7c366fdcf62364ef4bc03d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168388 Malicious code in tealove-naiman49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a3957cb70afd2b1619c0e3d66311d5db9c3cec69c1371901137561989e4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155882 Malicious code in ican-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c284c19eaa9c6a40caac1c5ed1149ddadb9bd7e5eaf995143a1b79cf388d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158239 Malicious code in lintang-tea76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35610bb125713f817246fe386ad0871df1d8ab32ec327999e5243620d11e70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153426 Malicious code in avminh-afinagoofssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9faaac946091f5cf10be380f3dc0d47b7041ae42da4938e97f25f0b64d67460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155832 Malicious code in huda-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c7098e08baad0fa3f18f2fa7f10ea168a521c4b01334dc6d0619d7ba8cd317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150290 Malicious code in @mipta1/tx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d358ac40d3f2a81f9ef40f1aea21900fd4670fcc3ccbe6c2a672be3138eb534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150832 Malicious code in @miptaa02/mijaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935d4421a858f209991a2603c0a46309f27db889f0a63cfcd0e48a4847185c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159920 Malicious code in mansioda-nona-mugiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269447ea89dde1cd31b6423a9476593ecb0f70b00585a978a6cc0369f2c4368f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158778 Malicious code in lookingan-namala64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e27da9c752b23b9e55e76c79f4c511079760ed1b2230e791cf5c1e8b83dcc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153701 Malicious code in billa-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcbf273f38882e929ea4eedfec4ee150182b4d5014ab194247136d4956e25372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152401 Malicious code in alita-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d46d0803b6af9b7ec6ed6803af67c1f08a144d80ac393a03529067870f7178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153699 Malicious code in billa-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77151b456ed3fac045a35b1a85e644519b65299e4b345a42d8c9933ce27b5b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153154 Malicious code in avminah-fagis-gfyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76168df0cbe6c5efd9044c68e1eee84b6af0cfc5c7b0fe38a8e821e301b2fd3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166487 Malicious code in sunderlan-uyud-vamukanmuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f4b34d8cec03ceb63786a785dc9a86cacd8b1ff5222e26e64a8875900d44474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163761 Malicious code in nudela-gagaa0afhf-gafsafoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17630f10176f7b53f14f0e26d41236f74106d95e82e18d47bec41b864f7b527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156581 Malicious code in intan-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969ca3f143ef8592d330f35cb0f78453a2ac7ff5ea5a04ed2982b22570f898ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...