MAL-2025-170158 Malicious code in upilka-luzmu-kinugijani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f630d4bcc10aef7491d780efdd50cf5c0ebc389018370df66ce18d3b38fdb09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151570 Malicious code in abuh-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82597a0195b96150895c292c4e99607f11dddde03d976e1a2ab3160a653a6e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154587 Malicious code in dian-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d89726f3ea6585895c2ddf57bf1a7539372a3b4212009dca8ea02bf3075ca8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156947 Malicious code in ita-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c374c976f5c5b3aa3d60dcfedd235a7a975cdc96b540e01fa7b3da5f8bb7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152020 Malicious code in air-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ccfba40a0da81dfd53cb2480a21fe76554151ddcaeb93c1f748a4e0c043af5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160321 Malicious code in messi-ftfa-usidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cec726384b8eef45a5c89db0fc8a249d9a36cef43fbec230316544fb60452b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165625 Malicious code in saku-aimaku-umuialakdoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5cad54a38a4080e62b351ed47f178905288ad68defe01b1adad832fc8aa975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157049 Malicious code in jelek-rasis-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf580b0d87536a4236be19db2b41e3e978c45a912e42be45ec97eb8cee703944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169094 Malicious code in tehnah-cogsfdifad-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc9263bcd394b022a8aa451d20a3a7ceda86023bf6a639e01f1fba5e95269c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161295 Malicious code in nabila-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dda0260ae6a0e804deb7ee75f88f8691d8c46979fc9449a86722ce5190d77f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150309 Malicious code in @mipta1/yasd1sf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b7330112c88f83f27d92b57300b2e4b20c96f1bde1edc9c6738b741a7f9e67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168764 Malicious code in tealoveness37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21685661dd07b64b7bfb6cef431ba1e7b5c3728b5a43be7029a24adfbc22e18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150088 Malicious code in @mipta1/kalasid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3185b2a0b6b1c1b675306f7631cf00991d75296908d2ccf488aef1a711d218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153945 Malicious code in bufpani-muisuayau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c11628c8b13b837daf4b87caaaac05d5ff02c0cbeb1e8f909b724ad4cf7aa9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150115 Malicious code in @mipta1/madan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368724ba58a6d0414d6d8c8809471405df5a76e96aeb5d690f691a017924adb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157950 Malicious code in lala-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4134c62abfa82f658eb940d983644e9e89d5f7c1efd5b4a15ce975732b89ecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168361 Malicious code in tealove-lady7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4858185fd534ef3b9c265abb401fd5bc85975d69628d3e9a75b696650e500a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154032 Malicious code in carvahal-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab804c2fe8cea4039b4ce0a528245642256c6ff61a782c8315de6cd232f86f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153790 Malicious code in bintang-tea40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b826ac53185e6b712a0b3585d3f25a8d6c92e4936ddcf2e0fe7c37b485c51da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150236 Malicious code in @mipta1/sfaar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5f6aa7ffc6063bb34979fa09da49f026d5f4f4b16b07411d1e518bd669ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...