MAL-2025-156059 Malicious code in icha-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab0e9c0260fa5a562fad24fb4cf138b7ea5a4e9968903716b6554358d629b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160148 Malicious code in masako-m-gunung (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8719114b546273c55d369ba9dbd755de40a1aeb549da42515b3ad43215a341d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155140 Malicious code in fitra-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afbe85d4cb67484b6c0503929d72d033b73e892d99d8059e2efbdc37a542a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159074 Malicious code in mahnud-mau-nanauayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64fbf8f07be8836c3906d7b375e9dc1e594089d781ff212fbdf1c8eea2fd0a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155918 Malicious code in ican-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6976197f5588f1b4fd9e7be3851b989ffa3e6ffd80446951f8eef23bbb0269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170352 Malicious code in verify-ayai-galakia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7370a1e3a5555590cf9909d1e24938bc6db7e60ad12b022b793d27ab619cb32f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149925 Malicious code in @mipta1/amsdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ed5dbc80f398405a32d2d758792a3ff45623bdaddbdfa98fec310b843d7fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164004 Malicious code in parwo-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a6db169474ebd98f27e29c9be70dae713d668ca774e800a5b7c81a07d14ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169288 Malicious code in trevora-cir89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f5f3abb5a14b9e59260450a30bfcea214e676c1f643c5c862b8c6d58802e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151224 Malicious code in abib-alaufuai-ayavauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d806a2d58b08fb5a0534e9ae86c60bf02b616325a472f20242322158a29dd542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163185 Malicious code in nokire-nana32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6353f372523f8540b20b3835da6e486eb68e5b5dec9902fdf78f2b9b651dcad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160938 Malicious code in munir-terd-tesrb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3933ac901a98132577ccac62d2e073b2cb25b728eee6912554be84bbf97f0aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160398 Malicious code in messi-urt-efus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed7967d3c5f78c54a46d4878cee3a6c7b1e733b07747649bbd68c0c3407d4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164047 Malicious code in parwo-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58312531ed9767e5ebb94b2c56c046258e08115a3a424a2e1909e6c0eef848aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155562 Malicious code in gurs-uyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4ca2a2103cb896e9bf9aa5b5395e6b67c237b6e167679a1b2f6e100b40034f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165095 Malicious code in riyanto-111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306d0a7d93e9ea53c8053bd4a908fb16954101691a80f635b7cfc233d2a03fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150566 Malicious code in @miptaa02/dffg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8e0e66de984f3d7be61267b681cc1b54056ef14bcb6e6a36b49e025c4ef541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156178 Malicious code in ilal-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a36f0e55817077931bd538b94640a942a98f7e32d5c2f118c9a23d50c66f51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164022 Malicious code in parwo-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af43bdec3a8468d9954a56ef420b717b9f2732654afe08b99d849d01996c151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152105 Malicious code in aji-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285e0ea8f0eea3746029fabd5d46aeb99662541edf97d292737175b5e6c9c707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...