MAL-2025-157870 Malicious code in kupa-lublio-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1b505fd4e0ea37b011376e64b9c1b824604255c789af83eb9e31f004bcd231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160408 Malicious code in miftaiky-field-partly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53eb108ec7397db375835ed96942f1c0d0c9fe2453337d94ac73d49a274c5a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170570 Malicious code in wulan-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a24fb4d6ff3c7fcd9466e0b5fefe2c3e822e404ab892a2c9556bcb9bd1e762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169538 Malicious code in uaragifa-ma-sayuauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb02a9e1fe44450be8ea54d22d37b5585b48569b8a4fb083e69dd16fc987946f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165027 Malicious code in rival-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5af8bdf1f6d9383aab9504a1c9ea5186d41166e2246208590e1681b270ee53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158834 Malicious code in lookingan-namalaka24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c706aab277710211f3081a2ef41393f1e0bb7dbce53d17557dffabd62afb3b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150600 Malicious code in @miptaa02/ewihj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fac598f0a51f93e5a2fc731d1c65f3208e8bd55c2a2834c68ca2441b7ff8765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152513 Malicious code in alvira-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a21c6d502b51fc79121a04303416815ff2be52349d62a0106318e9550b83345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160549 Malicious code in miracle-dokloi-ikauk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4536b10209e5b4315ccb145b25736918dd68e77a87d8ddcf02f768f89c27539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169277 Malicious code in trevora-cir79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb973e29124f14aa0e962fe58b63f36d29731b6e1c15e75e3e4ba1de84ebe5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163307 Malicious code in nokire-rara20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054b119a6f69a87fe5c2446af00e13fa1828f08de7a7eeb5d9425a164e57d8cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150551 Malicious code in @miptaa02/bmb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 717d0f628a5fc7ca2dd52069ae25ca92d7f25ca2ee541b81a3a631b777fa7396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156289 Malicious code in ilop-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf181be2adcefb98113cc92cf077a35ca0ca26b786b21e1db3c101184c32fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155493 Malicious code in guras-visa-malas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845c294e5fc23ea7aac83dbc07e736f0566e17f452927e4617793c962648ee08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165157 Malicious code in riyanto-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229ebab54512e6e1397e36cb3175642185601f3637aea18c4f771f0cd03e2c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150276 Malicious code in @mipta1/tseszdszar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6e54ec380aefcdeb01d3f51e7509b3ca76bf34a2f12ffda7f946effcb6f0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163388 Malicious code in nokire-rara94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d245b4c88eba581ad5ed46500b0d79c1c6befd0df1b7f3c4a20402c6c316f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150750 Malicious code in @miptaa02/irddsis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3107f42b75dedd2e26243f35490266958f8755f0adcf8b4d51fb729cd65c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157801 Malicious code in kuinsu-uiu-vilkuimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73472fb65f0ed932343df7fadf7a37e1ff6753addee780566466f4122ca7b676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167835 Malicious code in teagood-sukuna78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92abb2acdf2477542fcecf5cf2773f3891928c64459b7790e1fe9c6666c16a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...