MAL-2025-156280 Malicious code in ilop-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b415ab8fe2c59c58608086fcd907ea41b41cd51338b1c9a7631b2f98ca1d24b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169597 Malicious code in uarg-mitauiahai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb2f8bd94209da8d4d1f6bd39960b6b7345aa3582d53dcf931edaff86a4d590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151175 Malicious code in aben-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dafb4a14abf7bbabba6c69a9c91a4f584f7a25d0dd688fe57028a2e8825417f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150174 Malicious code in @mipta1/oras (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e55b7cf41df2b60c003da22e479a06fecaeeebd38526d0d3f24ea8521fafb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161686 Malicious code in nabuf-otomaboin-nohkkjigau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce16d62cca70d092f228b8bc2902f6fe223af69450a68b9053d22030a47e729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161095 Malicious code in mutaus-mansis-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71c2d0bb3057153266c4fae366e67c1dc68065cf3f36735f072c44522034d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161480 Malicious code in nabuf-otimon-g0g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105201031437201e644ad256255e24e36c3d96899cc640492aa327d012ce6073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159800 Malicious code in mansila-tfla-magli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e3249dcf05fa2cca22ac4461b18eb50d9afde10aa23066f8cbacc8951e3570d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164687 Malicious code in rino-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c44302aa36be938828e7fa43a32e9b356d85dac90e952bdd0450c8c20599377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167863 Malicious code in teagood-yakuna102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47bd7d61678c7e78b2f10dd483302db8cc819c5bfac8b5b8757925fe98a519d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162677 Malicious code in nokire-kilua83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c2f895597e94e41fcb339406c0d1b52c1019466d0578f48aeb851d2add744b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162087 Malicious code in nokiragne-asafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38c7d55bd357a512ba67cb18a068ffa8d9d017688e67170513bd9051ef7e318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169673 Malicious code in ucok-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda101e8c94d0f3389a26efdca2710eed0120b4fcba11a7dae6d3588bb6c21d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152577 Malicious code in alvito-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fca0a2076c48a92af8a342040897104cc66673528ec76a202f51fdc0c5c451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166435 Malicious code in sunderlan-udk-vakumanaakuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6172d99085f06960a8a7c93249167e67c481f8688dfba10be89b41425cef6b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160476 Malicious code in miracle-dibok-inumuiu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e0f44e7e088c8ae030ce3037c7acdb84ed2ffbfd4bc77d7aafe7f5755c0139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165778 Malicious code in sau-naki-upsid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bed6e2687bf9552d36b578d87af347a4623878ceb8b74c179369fed9b74a3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153841 Malicious code in bitha-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670d3b7f641b25b3735dc8d77c764568fc8c9f15914fd190ca828d0fa35ac394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150671 Malicious code in @miptaa02/fshg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ef14016babb38ae9b908bd128172debee2a2607cc864e2f0c58e2ce55019b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154359 Malicious code in diago-kamli-luak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31003caa67ac88a5e58aaedf89d06b29b63e4456694edb97df4c62b205ea1044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...