MAL-2025-152431 Malicious code in alvino-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdf84b57b4bcdbde0af608fdbcd457c4fcb66f17493fc487a65049d183c3c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157799 Malicious code in kuinsu-luuki-vilakunanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa32980f6445ed8537f8df2cc6d0b36d1fb434072f52dc113794bc7ce1d72b97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170130 Malicious code in upilka-lukzii-ilakuzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4192492010cec3e5cab25c039c098522c6c29e5ec30700dfdb39bf47e68ad172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166939 Malicious code in teagood-lokika71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb7e5e7a7e204607a169336b523d9260b4ae206cca997b0bd3179d9d618f345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168117 Malicious code in tealove-boy12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b239298cd3b172d8fc0a8a3cd2b174f6520452511949a761f876974a99ea57d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169448 Malicious code in uafagarug-mie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1567e3d9a7fb4d215b838414cba9cf0e77f074c214b5046e61a8c60f3d1d59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161224 Malicious code in nabila-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb613744a04b55d2b3ab9a72175bfd7eebb5d091e9e07b49a53a5bddac70bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165688 Malicious code in saku-au-idusanila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd98a720d15bb14274b95708e3e8bae52a3c8a450f6efe91c13ebe35ea929c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155741 Malicious code in hariyono-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 581932ecd345281b5f7c5603f8d7c27eb993dfd8ed08c634aa1e46b8964c0624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169681 Malicious code in ucok-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c4db1db84c53c3fed2c2f2abf0556a4b9bd1187d16f9cc49c101eb88760fae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163242 Malicious code in nokire-nana84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841fbdf12aa2e425a9b6d59e88707de5f186a70c2f4800600b0c2ce3f5a760be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168092 Malicious code in tealove-aruma36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f510d7655d504e4c01651ceb6361922e77bfb5157c5e518fcf7cd85fe0a02869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165402 Malicious code in sabua-muuyau-tdafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474fbe666de989de84ba29e1be6f8c7a85fa0639d62b005b8df13d3fcb265d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168210 Malicious code in tealove-coki6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee7e3088e603f970bb9352ece2b1c7c25edba6aad3c8f38431670833e5bd2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157046 Malicious code in jelek-rasaaya-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae8a767afc524d740d61440f09d2af34aa5ab0e0e83e55dfe2f679dab0b9079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151966 Malicious code in aibopuna-mobile-arpnabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e005d0808956fe5553ae1935bc6ac5fc2f7a78b9c9e7eb839588d6a8273f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157059 Malicious code in jelek-rasismem-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28721b692d5c73eb6d6ce6cac182135c10b57a1ea5021d6d5ceab785db524e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164995 Malicious code in rival-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd1e3ad087421a005058a2a01b9dcc0ba17a8b711bf4b0c6a3b967ccdfd8157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154387 Malicious code in diago-kamoi-liuom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d45a2848559a2d6db7037efe93df6573de96460cf6dab9dd92fb5ce5a259e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157317 Malicious code in kamasada-nusata-buajidibdan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d981a673c2269b148d73e4db0ed8f9563c93cc9bb4ff0b976da6ec4a589bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...