MAL-2025-152370 Malicious code in alita-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dde1ab3194899022f51b0ef4eb0163e66f49c1b17494e9c7a24d1374e77436d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156684 Malicious code in inufgi-gotmaa-anamufozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b755a928ebb671e401e76588a9c9188030f4a0dcba9975ca21e2739b8e99705a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156746 Malicious code in inufi-gobai-jgr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763b6adca64507dfd46c313b5072f7fcd26a20c08bb43e571f9b7dacaa7576ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153112 Malicious code in avminah-fagias-ifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af55108e23ada1fa86bb9d6055c44ebbec8b915958223f0bc0b70403f0d22e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166884 Malicious code in teagood-lokika21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206955c5ac890482356f4aebd3b6d928670c9e97d2c3ffae02906e3c23694db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162894 Malicious code in nokire-loklok40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666ab270b484e3fae153648ac5417f28a1ef7dabce23c3304132305f1ce33bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150448 Malicious code in @mipta19/slv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571041fae47cb37a94f3b38228a76e1e6a9b3e46ffd0b2074b00334dd5bb5453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159985 Malicious code in mantu-rol-gagak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e27ef74107d5c262cbd80b429b738706b3627b5478afb288d971f0f9e2cf630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153804 Malicious code in bitha-101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8955a2da796cb63dbe1b02e9a28931cf1655fce1d3df9176e50563853c08e256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160085 Malicious code in manurung-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09da7d8a38a8f948380b68d99990212876b2030794414126e58918a8ad50ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157517 Malicious code in kentung-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c1f22112209364e6d6714d30d6f630e9e8b9567a8735de09fd5023893e6a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165048 Malicious code in rival-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928a83df657a0766398d8b92627dc61b713cd46bda95ee3b6ff11f44a355ef90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159987 Malicious code in manu-noatmai-agamiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f2e6ac4d9c0410e4186207aab1c3e9411076fe534f2a2507204262817fb278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153581 Malicious code in avomainah-frauu-ofafaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab018454b312ec4a2fb3e609df96e4e79524b12fd60cb768680ba8d816e944f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158238 Malicious code in lintang-tea75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f442319cd9f3bc3243579b6789d4a624e35751abb8cd1383dbf7ae9dda7b4e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163783 Malicious code in nudela-gagaghg0hf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941a59916083fa76fd0d91b85a8f2d8c34ae2f9d5a772dd21842c7675d193a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153742 Malicious code in billa-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6028631a31c8cd1a77bcda9320c50530b8dc5ad827ac78e84c6a86f30edc0421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169743 Malicious code in uinsnu-lotaizmi-kunilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05426867bf0cb686bd6ab5cf0f6bc2fff9a4fc9e199258ee3ba33baf6ee7ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152589 Malicious code in anais-pafoa-asigoga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b76470ddd9f5985d1efc342fb32a72c2be7fe0fefee181749268708fa68215c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150163 Malicious code in @mipta1/mizcs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4c34fb9caa09e7294e7fccbc620aa48071df02a2195c8276586938fe177d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...