MAL-2025-157489 Malicious code in kentung-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eac191beb99ed70fa85fb5876c0bfd12a6e163e497b5a1350b34f79572b218e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152077 Malicious code in aji-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e5aebb2ee6568d9226462b781362cc9c330515fae8ca1171ada8f453c3532d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165003 Malicious code in rival-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63134ba9e3325a7055899f2eeccbe34daf73bff1bb3963d474c9b3fc1fda5fe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170103 Malicious code in upa-lubalauvlio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fbd944e9b439665667c878a0a17e5f41bf486524db3a237c385ea5270c2726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163256 Malicious code in nokire-nana97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2267be34d317b1ac31d1364464bd224cafbd8f15a0c16d106353176060075831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155544 Malicious code in gurs-munira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885bb86aa5ee1cd71eeaaad4f05db908d69d2a075d815da4e312959e88b45f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164690 Malicious code in rino-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4434b62c628e994cb702f18a0f4889142cf60d7caa7d304389e457e841cfcb59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150146 Malicious code in @mipta1/mikfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239c2733667e5a768573493d3e46b5a232331cecc24cb552eed568a6a0ab16bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155031 Malicious code in fauzi-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce045958ae4a653d91bb7c5c3fb94b9720dd89bc8155af3b45b4d650121486a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167357 Malicious code in teagood-nakamala88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28ad0b970f8a29c81c023bad5705a25fedd8612c8c20930bb449d83c17ecf2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163568 Malicious code in nokire-zabuza75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb162ad25104f389a9c9e0973bf29da4bae84c2dcd7246d96bd5933945b7545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149923 Malicious code in @mipta1/ajus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67fab0755d795d4220f358018a006f47dea0647281bcf3cb5bab00e6ed481e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169758 Malicious code in uinsnu-lotimi-killneauar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c587a4e93ca9042cbca20a0d949860db8c1fb0268dd599c1e791e1d6dbbbaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167576 Malicious code in teagood-nalikoli23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c77b218072691559c77e77022422aa011f2ec738b5d3400accc22df4d5627e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168913 Malicious code in technical-alonbio-tolimabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5438baaf65b2cb7ba5c1659aee06da13acd368c0701daed632bee212945c00d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170414 Malicious code in verify-ayicu-amha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c8277262546aeadf0174058b74a4e45e4d555acadbf35da91c398932057f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154013 Malicious code in carsa-rdesti-busdtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb67f2d51da70db1397f1b5700091144a72628bb3fec0f0301d612e0ee8ae4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161745 Malicious code in namada-kasito-nuatdro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77176bcc3baae92ab15f286222a47f94e46d8ff630d02639258c643534fd80f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166087 Malicious code in slamet-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dec3d41fb514ac6ea8a9ac3123d65caad1b27d4f23658766d9c6430e4ef148b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164477 Malicious code in polymera-manuyat-mudniosps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02cbea01a8aadec1e3fb71e51e1f3d8fc7c8b7999d031017dc000d18cfdfa189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...