MAL-2025-160080 Malicious code in manurung-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661a9f3355588c018542622cb9fcd74d8744326f56d11b82900ea88083631cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150778 Malicious code in @miptaa02/jefp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06500efef11c6a0f8ed21e821254f15fa73ca12f7f738cb84cfd1ed7f64afaa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163436 Malicious code in nokire-sekiya46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b74e7318c14ad8fb9b4f6b75ec43ffeb6c28dbfd1cc0f1d9b851a81a2587754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170189 Malicious code in uyafru-tuittat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0bc5f583659758f313f7ba15e3e490891be30ae02e23534d751792b736e2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162968 Malicious code in nokire-nakala17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023baa9aa32a6a1da4ed0cb5cab803d829971e2a99d9e20368078d3f7139c38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155464 Malicious code in guras-tuy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533449f9acf757b2d9582221963ea4bf95674a9559d7375b23c4aee33e3c0943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165054 Malicious code in rival-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f10fcb966718d85921e30d2a9667716e45fb364deb11fb0e280e44b5446e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153457 Malicious code in avminsah-afiaggafgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a75199bfc6e5f80a7dbc1773dcb11d178d3a09de9b2c1f71a259c0120f522fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159916 Malicious code in mansioda-nomiaduai-mufngu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b5686f1fefbf51098cc0f725e9539f802f795389b5cb10ffe27dedcef45718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163968 Malicious code in parwo-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd9829c0b774bca9baa8249e3fc7c41e91454ae0fea91f91111fc6f3d75d852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164087 Malicious code in pilau-akalu-kinlaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29df7c32b338a05136cec6f1f9f855dd72c0d551db84b7e8a7a95c927d657e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156438 Malicious code in inal-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2196c096696d0593947478c24bebd8b27452ca967183e987297ac6d446da1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157180 Malicious code in jurss-gasd-as12as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1501938d26baac27d1d9d2bd5094fa8bbf40d318be0300f5894cefa6501dd90f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160824 Malicious code in muklis-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b035e17e6c2d344e5e658fcda25c60add554a83d778006c95954ae9eb967329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155967 Malicious code in ican-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c537496a3919031ca09c3b7f2de8c83cea369f49cb16a981cd6d062c966c0fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166620 Malicious code in syahmuda-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507807b40cbc31d0528bb29bd0bfcb6cd9415492dfb30fc340aa1f5e08bbe54a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162769 Malicious code in nokire-lokcek17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c41624814ded91b0ad8bda1ec83eae8c9580d8cb8b233417e101c1f86c2e232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150098 Malicious code in @mipta1/kofad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f507a0076f84de378604ff6e0cc4c37b2e22e23643338ac23a2fe510a6ac2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158068 Malicious code in layla-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa7b8fecd187b11d2dc7fd6a3ba8d95eabbfa27a98d032ebe02df0f1e1f668e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156655 Malicious code in inufgi-gotamaiva-aaana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0354eaec50cca88a9e1a7e4d5e490156e5a5481b9c20cf6878370f49cf5081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...