MAL-2025-156243 Malicious code in ilang-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee51500d1fa90156c900d0fe0fa03d3704e8c0752f55304911765ac10f3b4d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170343 Malicious code in verify-ayai-auigial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e12d711da805b516c95fd000cb06d68d12344806fd814b5a7e38e5cde2f319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158691 Malicious code in lookingan-namakita76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4387cf88999ac9f68e487ef8a5b7690d6dd1282e7cdc954a518ca50c546b8ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159629 Malicious code in manda-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af0b495eb8e5da519a1d76e2e6109a09db2b702eefbff041a6adfe0bfaf23bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152039 Malicious code in air-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de9e814166f39ca5e801a52dc85e345bcc1149cb4de9189b7f452f64ac47fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164268 Malicious code in piluvaika-kaliu-nubulikvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d98ad5f11bbdbdbde1bc5518024466982232d2b355ec8595428b89f8e293ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168713 Malicious code in tealove-reborn37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3e645da9eea3ea7e7c7d10b2003e951e80100c25d9d5c2008614c12170fd63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155970 Malicious code in ican-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f9af57b9cd370c60895fa35195a841271d38c64f21eeafb95fd4f5260870b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153909 Malicious code in buatf-buat-buatat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23112efa7805e89efd02dded81807571e6a2d7d1e46c3ad29919a82dfe6a26ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158208 Malicious code in lintang-tea48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da090915ef353ecedab468eddf5465977ebeecc0faef1cb2d0c409d3b2cd785a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170418 Malicious code in verify-ayisali-gans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c26021d7a29aadb481e139baedd02ff1badb0b805f0a0f8a2ab28610a6e63e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151167 Malicious code in aben-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfa0e3378a1fc376a75d08747767f1a881cede90bc4dcb9457980ad667cf788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160790 Malicious code in muda-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cbcaf4a8dc0128f2b69f9bc14d31d0be12bfeead8216604f431bb77236a0692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160075 Malicious code in manurung-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d51469aefd5735ae69c3fa6f69b24fb21ea629f43c9befd82b581054ec8c964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170059 Malicious code in uinsu-ls-dinabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3bf23542222d102fe64e278a3befb35d744eecb31f2e9da683e0987988e00a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164355 Malicious code in poli-akilu-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faa091f41bce36b8544aebb42476d231b0f1df78c1c6500f652d446a98b6dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155359 Malicious code in guras-a-koreaselatan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5aa56a4b1697561d310563259b5eb852b60b232b4221213422908d7d8ae8d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169675 Malicious code in ucok-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c532ac9fdf50f9aed6e6c66f1602e76253ca2e737b3e07d7e85739ba061c8d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165849 Malicious code in shilang-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d70d35c6c55c9586d81abd74c40990624f82fbd615cd8243ca31182af46e6d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166156 Malicious code in suharta-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fee907f2760be8ed2602baa29dc0d956cdc97a154770a27fda10d7b71212c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...