MAL-2025-158322 Malicious code in lookingan-konami6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6e91f48cfd128ed0036181b8c7680c774a88429bde925a040d98441a7b72cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165918 Malicious code in shilang-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8b8463d1e62de5b5aa515ad42550397b74b15d8843509d93174aff9b132141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163636 Malicious code in nokire-zenitsu47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a888936f114638773e90ba09ec19d61bbed330814ba5e3ad3b818e276c2f0d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163844 Malicious code in nudla-ofog-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3607a632ddf54b34ecb68eea529365a6cc715e2c8ad2ce45d6f2314cf1cc0fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153101 Malicious code in avminah-fagias-fimoaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d253d7d2fd147ebed8e00465054189cea4f6990f80679cfc76a41d4cfa626c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168377 Malicious code in tealove-naiman38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01e4dee6d8ea1784b971ff7fa33321ae925ba1e0410bd237a710a4612943b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159905 Malicious code in mansioda-nodana-munfang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667d06a3f172a3f82ddbfd368fd639d7e6937d373232b6ed8f46b33cf5eb1aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155856 Malicious code in ibanun-ota-umu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea1e7d5932d7d570480cb1b686d8a4e4594690f59efb3d56a611e2b44194c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157234 Malicious code in kamasada-buyada-asaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f41aa92ee5e887cc34df72cfd5d805ceca082df4e8260d8f31989bdea774f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152810 Malicious code in aril-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e4a6fe4971b72ce507283f245513c18698a155570733ae10c4acfb4610d869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170128 Malicious code in upilka-lukzi-iluzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887342f458259c62a98b841ce0f63136b456a19cc7f01e4aabd0522770eef284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150345 Malicious code in @mipta19/anunaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8640a28344642404b25314dee71a7c89050b5b3716ae528d3a65da9aae8b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153712 Malicious code in billa-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3745f12b8365ca0d689534c46b2b3fb153d05411cb1e2af5216a2f1646d5915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158214 Malicious code in lintang-tea53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd428a322cedaac3fefdbb0c64e4b67572b182e5a62c07b389c661639cf7e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165746 Malicious code in samehadha-hzios-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea30e62a6cc0644c3f5916b87388ae16f4346e38c6e0c100e2a10788060db15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164542 Malicious code in prayoga-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f71aa07ebec2840e3e6b3186dbdb797197f21954579fd0f9670356a96dd23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160871 Malicious code in munir-butssdya-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094a2aa908a746c3b3ff5a5e006767608a6e0e63e62df177c6921a74e00a1d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170144 Malicious code in upilka-luzimu-kijnuhigihjani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c86e9f1656ccf402997d54c1055c9698e20e58e1c2c4de0cc19e1d80c3d364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169171 Malicious code in trevora-cir118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ea998284e0a798eda1a7010e55a12a1f0dfc94a6e4ab6e92c69b2cb46a76f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162048 Malicious code in naut-tyutu-sdsaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc93339622a60b41ba66e8d2c523d4b2f9ffa73d071c3cf58c916a616a33fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...