MAL-2025-158659 Malicious code in lookingan-namakita48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7372e719c0f9b790c7e0ed1742a0c237f922819535bde2876f5425be475ad283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169732 Malicious code in uinsnu-lotaihzmi-kulnisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f97c00f0230559234346d54199d04baca0758dd51b34aa7a009ad126497a0a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162655 Malicious code in nokire-kilua63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52061643fc724aaa60a852b76dfcd4d3c1b9f596a52f7f3458286e8faac1e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168840 Malicious code in technical-albiko-tavban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002a19dbbe1a86e0aa7bc8657ef1be32ab118655126f7903cad51d68531152ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152018 Malicious code in air-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb8b149d005c44ba6b8e380a212562249d0004f02a0c5421bb8ec89a91ce739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164053 Malicious code in parwo-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c66ce7d99976a5179b6e9b40076897cf0cef65fa4700190a7274138ea41a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150915 Malicious code in @miptaa02/reyua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35718d0b3da1196ab42857ea0935e4a38b96e7ebbdd453a21bd2be6f7421a9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160671 Malicious code in modirai-igno-jifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee99375a977857db76fd7bdadc3ad615de3e08ed32ab0462030d4bc02ff45d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160147 Malicious code in masako-bendera-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a10040aa6406fbcf30041d5d9bb53919680f38e4fe7cfdb821740825e502979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157632 Malicious code in keyla-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 187465a7fb2b0cad4aac12147a2bba8a4aff986455389a804fb52517de8ab010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152407 Malicious code in alita-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04dcf2d5c90e14a6f1d27f316ec1b6c2b21185be95e71117ad54b6b9570e70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155822 Malicious code in huda-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ae50f2d32255f9144124d22c6063b67bd57feee08ba66d1dbf4f1f71e2fd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162900 Malicious code in nokire-loklok46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6343bc62085048e7fd566f6ade19a97b4b864b99c213869a23be8f6e4f0db06d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170317 Malicious code in verify-aiun-misiuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c884026ef46767d9d65c9df20b9e897cbd2a1a3ca2c624727812849c65b246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153599 Malicious code in avomainah-fru-fada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a6b7e10cd42b04a9f59f2d469d299b3ba63308a26ac8b7cf3412cace6004b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160096 Malicious code in manurung-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae7fc92ca20efe80f0ffe85f0e76516a819535bef1dd5d62a5c56594d870e786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160627 Malicious code in modirai-fuhoupia-jastfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b103adaae4c177b581038c6118252a85c03acf9a1c0bf6445cbc83fe4797e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162563 Malicious code in nokire-genji71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a29a76626b2de2335b1bd404e816af9d576ef6be82889557502b52c1490dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156308 Malicious code in ilop-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66d3f51f5804090346cc69c9db03b05e44acf8f0aa2c894b439c1caaef89ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166446 Malicious code in sunderlan-uyilud-vamuikabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84ca2cf152431b1fcbc10736461758a87eca65da6752f120f5f0f1ed7ec88c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...