MAL-2025-156260 Malicious code in ilop-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff1ff15a1fb77cecdf29a3eb784aea3aeed5f316b69889265911befceab3f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168886 Malicious code in technical-alnbio-tolim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dba7b58706e9c7972368dbc329ee2c9406473b6b5e85b7e392453ca647e42b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167137 Malicious code in teagood-manaki7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee5bcf9df6aa2781957e35443b47ff7240bd46db2df72ecf08f2ea77cbcaa4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156405 Malicious code in inal-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9524129293a3e4be2f9fc2996fde68b3a9c44cd081d99dc4d426165c17bb01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151050 Malicious code in @miptaa02/yyds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8f2e776f31441b732519e14b7245567940b4063be9fb49abb02c9b9fd57271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164473 Malicious code in polymera-manuyat-butyaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b3bd7bda2bc474bb2224820ce194068a5d870915b255923de42d069f971d1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165066 Malicious code in rival-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e04bafbd7735bf2ebf09259e3b098d5094c0b46c08a5f1ae866c6581c693074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154623 Malicious code in dian-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d4cc0dc42f9c5778e7985e99364bb8873f74efc292b489d09a3d2f55c9aa51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165329 Malicious code in sabua-muhay-ntufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b973602a914b6eb8efb674d79f9b00870d7e36494205d1c6b640d81cc55083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168191 Malicious code in tealove-coki34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9d039df00a6d57387709dfcdcd3aafae20a77066b280b69962cb2bcd4def5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164028 Malicious code in parwo-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e915035fc1673f117f87feaea9be8e042548cedb1d0225d7c2a9aa9bb83a38cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150541 Malicious code in @miptaa02/awfsae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b693ac3109d39a8dfbe4b201ca87ed22c6286a7a3efb22feb709bf69fbf27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153439 Malicious code in avminh-afogai-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2fe9e14fb44e35c83ff68e0de5088fe07e3351a5084b4a06e56bf98b04c2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154868 Malicious code in fadila-poke133 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b122dacecc1e3b78fce2efb868a4642a44c50fab41850cb1b2d7ebdd8e82e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159008 Malicious code in mafanfs-matfddu-masan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a762632132428bb29171a78d73fdb06b2879985c191dc5b6472bbff73b20df3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169167 Malicious code in trevora-cir114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2073bb42f22e151b9dc977051068682229b6406d57b7a7b0244ea7eb20d19710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168087 Malicious code in tealove-aruma31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512258556632ce82935edbd468887003043edfcdf046284f835f7b9b523195b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154328 Malicious code in dia-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e056ef0dcd8c4ed54870eea248d0e0027d34d3f28892344edbfc8cb308d24575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166461 Malicious code in sunderlan-uylud-vamkanaunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b519b831e64f27955d9772f5b94db71be4b2013d937e2445d6f0eb6e96f1468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167391 Malicious code in teagood-nalikami118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2ee62221a0fafc26fccd4d1cb0b6e612a47eb0dd45f660fb93a67eea15a849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...