MAL-2025-151052 Malicious code in @oppo25/lastbro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ba0e2988258b029b28f1bfb6d3c2b45be5c98200e0c106ee174394d84079c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167490 Malicious code in teagood-nalikami86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96414eac78131ad44f6f8326473857973af73e40e7c2a72470fa542a947f3e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158092 Malicious code in lina-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3acf9293a6c1670d9a98431e11283feac9655f89650dad28dbfc10976272e6c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154157 Malicious code in dajouka-dspdas-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76555b7dbfdee0b19b55160f4c963cce04e3196a952844a4d86b658f44613eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150088 Malicious code in @mipta1/kalasid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3185b2a0b6b1c1b675306f7631cf00991d75296908d2ccf488aef1a711d218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151125 Malicious code in abeh-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a9ee6c27109bfd776affc8b58e9e1bd5ca905e1889327375a5d2964f72d078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160880 Malicious code in munir-butya-miun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ffbaef8ebd7404c7bfdf3a3a67f1e57d7ebabca3304ca84b1727ebd5b493a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164328 Malicious code in pitra-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3dda8ea565fce5796a421a5177d325432cc8cf6d32727b882a3b8aa9c3f9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158428 Malicious code in lookingan-nalako20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f9227df2137f6177b8a5df6411194f7c7b3d6a627354a9425930a57f90c14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150788 Malicious code in @miptaa02/kiliae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397373da564c0d2af35a35afb8a3373914175f8bf2f2591311295e39a932bc02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156166 Malicious code in ilal-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90524f1a7811b86e041e73395f7d844803f1834e21080f379f9392b2c83a4434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156218 Malicious code in ilang-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed1646bf114dea111657e3b79de69cc571e640ed31ebafc4f08d4544fc46760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164156 Malicious code in pilka-lni-limaubikai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60569ba26d8c348bd9f9397a9f89d480cf45d07968796ee0703d2dc931b94c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164047 Malicious code in parwo-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58312531ed9767e5ebb94b2c56c046258e08115a3a424a2e1909e6c0eef848aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158813 Malicious code in lookingan-namala96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a923ab56693912fde2213d832d2db4096f875a6bcd93f38e2e723334cae2029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165694 Malicious code in salabuni-nibia-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e159c856ae3400abd66b94db81f0ff07f9599dcb99ec94dc7a4382eaf62da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150696 Malicious code in @miptaa02/grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c5d178201a62f592f95f77b676f8381da8c49958e3d933e85163a88b9e51fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167376 Malicious code in teagood-nalikami104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e871b4334f30b1c7e290e048c71e1b7dbb66d660e3e61cc784249486ac013c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154285 Malicious code in demdadf-sadudar-muaiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b32c2f2c8b523b67c49186ffc91d458cb13ba35a597e19bba312104164d4fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169288 Malicious code in trevora-cir89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f5f3abb5a14b9e59260450a30bfcea214e676c1f643c5c862b8c6d58802e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...