MAL-2025-160299 Malicious code in messi-buysa-butsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bc074b50823dec3dd887196c07769146e8da62db5dcc1e84327a78d24be0a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159101 Malicious code in mahnud-nofty-muataigu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95f14e9fbe2ecbe2a02dc8fe73986353a85d3d5f6b0348d99c33bbc4c7577b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165990 Malicious code in siregar-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d848261b7ad4b58f01b72263d32557ec05e970df918f8152b587e14a4beaaab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167335 Malicious code in teagood-nakamala68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a884157f4f022c06ac4f87c77f1367c4dfe1b4635f6dc4cd63a3b2fe3f0d12d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152750 Malicious code in arif-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3e65b45eb5cc3c8641c6e260b9cfdd0619b124e0aa61555d35b7b2482756dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169801 Malicious code in uinsu-lis-dakinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0756e862c791af8486ddba6ba5b1df52a8eda0e72ee4947213af11c81947dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159601 Malicious code in mand-nomi-mutunau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6bd136eedc5a7b207cd4745c06a6db785b973cb0bb96f52a0de9d0d1fe3829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164347 Malicious code in poli-aki-alubanna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6b2c3a22177f1ef69dba54d092ed9b4f83f4046f77e89c846f5f65c978092b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151367 Malicious code in abina-amugi-amia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce02b93b865bd878102d3a7c8d96e1334f933cec47db7be1b12257f8f2b4d131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150804 Malicious code in @miptaa02/kwnhghg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3afe58557cd507d5df2dcdd99e60760ab53286c90ee459c9af54afc760aa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156407 Malicious code in inal-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558a6b4dec06390f9c5648ad78132030f7e53dfab60e50a27bec8697bb3da3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164575 Malicious code in putri-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31c6ddf2651604bb770448f532f2b09ff54bee2d2d66b60d67a4a37476e2538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169993 Malicious code in uinsu-lotaihmi-kmlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bac6c978f727f5cd1b4c2b3f80c4a8333da5a3409a12fd64ec963c1af89b8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167069 Malicious code in teagood-lokina99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42c54412ff27e68f66cc8422bfc54aea71eaa3150f2e73cde14bbd9a729365d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168899 Malicious code in technical-alonbio-tol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1455a9d90c68aa8aec34c7b76c8bdb8c9b0f088964c1d8ccb619a0fecd14b169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158001 Malicious code in layla-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19074895c4dedbc23b6df3870db91fadc890524962e9303da8cc4fbb0a3b3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170327 Malicious code in verify-aya-amilsukaoxmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add665a3cec972563004924d39c728fd865f46aa637b59903922650880a93325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163372 Malicious code in nokire-rara80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483d3b7ee0dfd967b3238b6a4faa4d5e94838718b86e2707ef4b4994fdb74b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164664 Malicious code in rino-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8e43266ad5a7c55c18c8520c699f4fd9979bb949f4e8e1fc79c3b88fe0d8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153035 Malicious code in aviah-afisgga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d3993239a79c2edc59e85a62e0bc342a4c1dba2287cc90ebd023be7f4fda51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...