MAL-2025-152966 Malicious code in astia-alaki-malikalhafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d831bc1b47a166b02f944327f261233cf5da42a3389682d4a1e6812ac634803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167249 Malicious code in teagood-nakama80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02561a639d42ea2ab389d5efa3b2ed85ad2fa650885080ff3c61cd10ce97304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169505 Malicious code in uaragifa-afat-uar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960ba4647949de0a81fda38c010c80cafb1858ee8dbc47790802c89a99f7f03b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161369 Malicious code in nabuf-oguuof-dusagagomof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12278883a32f86e6fc32bb6e76ce442cd86bf962ddca1a4658afd51325e96ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153836 Malicious code in bitha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592463ecee1429ea74cdf7d58be2dc0bc3616080e31008b139ab743e8d14560c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166488 Malicious code in sunderlan-uyud-vamukapalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6347562da1aa1f5273ce3e5f8357c9588fffb5c64cab6fe221a2ac1edd07b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156862 Malicious code in iqbal-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9964cae10e8ea35195ca9fcd1809f4a0cead49c4b91c05d4093d31d71b651cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149993 Malicious code in @mipta1/dsfsgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979265774e07143b9be51c21c3ead4a3745f90fec07f362443a384021e413284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167539 Malicious code in teagood-nalikoli13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ad662c3a9d825533b26d595326933b9900e7781ecc52fe774564665e6aa4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170153 Malicious code in upilka-luziumub-iluanoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f772bcabd209cfced69341a18ece35b542c9edb3a1e97caaf0c79de668c442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161035 Malicious code in musik-dait-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5345333170d823915e8b650dd3ba6878743d12947925b59b6c1dfc44f3e15c21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153010 Malicious code in aviah-afbiafaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cca23544d93f1552e2e6834b0fbf88003f9c0f4794edbe3fd0c595e6ffd041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159804 Malicious code in mansila-tfla-magolani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b533f2aed5ab79d9f45dc23b73606fe290cf0e273662c13aa7a7bc594087ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150104 Malicious code in @mipta1/kofxxad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7354c24ae12306674b384cf07f0718d1536e9360ddf3dfb0625a7f3b3707061e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168672 Malicious code in tealove-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3643c4493ceb623d7f1c713157f17f09d828501aa1ae11d876378e622cf5bf0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152537 Malicious code in alvito-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbb38c1ed250ffa3a5f703e9cbb2c7850fabc85cf31f710cdc1d0ecab3f2de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157595 Malicious code in keyla-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da1ee1efd3f07f4b55aeb23b12c9ce56de676d4bd86c2f77b0d0d4761d88fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162853 Malicious code in nokire-lokcek94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f8ac03e67e6eb86106be706ffa48f39b66976880734632949b29357f0f887f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169373 Malicious code in tusaaya-0adds1-wfesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33df87f4d0b939d1eca8020069d3eca9344d68d50b9cdac93bf3d263f51eb63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157087 Malicious code in jimmy-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77d684a944c387bd212886d3ad5a8ddc09ed74bf10dbc9c1a4c697af3481a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...