MAL-2025-156295 Malicious code in ilop-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 813824f2f13b0d1a249be1b160041629616a8d328615b82bdbbdc94ccaf5b1b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153788 Malicious code in bintang-tea39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16677a056b7749fb6bece21d8f6e292b0d96f9ec5b7dd0cbd56908470c2338f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161471 Malicious code in nabuf-otimn-g0afigagig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d5511af50d2589be6ca5876ab1666a1338bc78da8fb78395b9f6627e262066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166625 Malicious code in syahmuda-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf9079fc9efeeae46536cb6efe069902b182936e0ae28915d88243a86c8264fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156227 Malicious code in ilang-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1bd90f39b3cea9a752333f705a8bfbb3cddda6d884712bf53c4594a939f8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168521 Malicious code in tealove-nice41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89452e5344d28dad3e23c813f0934f9f2d5c05349e42d4b4c11ab3f0de27bdad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161313 Malicious code in nabuf-ogauf-doako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356ebf4d5dec1495f4182faa694edb185fb9af7810e8798badf3f45ba75267d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161912 Malicious code in nasrul-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb729461bb6f951428f93e2f15f6bf658b1b5363309017f60a85109b92b2ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155099 Malicious code in fitra-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d5f364f2f0840470eaa65848288b8923c7d6f2c8ba77666d666341967574d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150968 Malicious code in @miptaa02/teaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d51bd8a8accbf2de5329b5a397039f39e17744a12485cf50c4ecce0dcf55286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166618 Malicious code in syahmuda-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb94d1c91e010d2ee30e1fef6a9cf17d3952e3602459cee41ce77cc4f68e9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164159 Malicious code in pilka-lni-pibalima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c667c5cdfa8f9c984cb69c65269edc85a379080e4c1ecfc33d986de384e2182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167674 Malicious code in teagood-namakai21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1684dacd4e5a1bb7df5e928d7cdbedd351a8c2efa4d669581bb5af7ef1dc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159522 Malicious code in manaf-mar-masan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946914b47b7051b06341f6c2a21edcc658c70e275fc428d170de50a87814e392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157264 Malicious code in kamasada-natai-yolarad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41dcac1e515e763e7077e08069c9d06ac3dc47aaad8cd093834b4889164caae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163157 Malicious code in nokire-namiresan98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e71a9ddf9798f5bc77177b570f5b56b4671bb790ea80d1f989d1a4af015bd39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161191 Malicious code in muya-mutfru-muytio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132279a1e97a719cc8d8cbf1665b169cd7136b82445c9625cdc56d53b57a8d73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153647 Malicious code in azhar-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9309da283fea0948e01cf4af2f5dd3900afff2b8b1d1df96ec7cbdd52d442419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160991 Malicious code in muri-nddssyr-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ee1621291df7b5d21b1268b3acf851fa16dceb6348f0ec881993e15904878e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154145 Malicious code in dajouka-dasdddeta-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2e3d5d60cb021953f555a89e830f5be6b3c137366ee50a0bee5e570d1fffaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...