MAL-2025-156295 Malicious code in ilop-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 813824f2f13b0d1a249be1b160041629616a8d328615b82bdbbdc94ccaf5b1b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159746 Malicious code in mansida-nomfadi-mungu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a5561a4f7163a6867b10316968ea3ade23113c2ac02fd57dde730d478b4e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157225 Malicious code in jurss-zas-durs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc3d816b0ba2cd0fe7c37fdca93e89b1b5f2df0e95b97a25ad2f58c3f045829d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154036 Malicious code in cinta-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d891fc1e5e24c860f0ae7b2af2e8a678528160a01e6f730c441d33e1fd96010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150164 Malicious code in @mipta1/mizdcs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46b4e6756b2c77fb244d319962ef1501806360958a23ba8a15273caf371a4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155983 Malicious code in ican-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46388f1ba1ed241a41c449d760c8dbac3c945ec4b27604fe839c38aef819aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151327 Malicious code in abih-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920f5c857c813f3f7520a32d83eeab4d73b47a52873c64601f6eb9b81d1b4e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158784 Malicious code in lookingan-namala7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212a455605ce7288b41a0322fc760fdfa0b40dd1d9f5f059ff301f81d25f004e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151991 Malicious code in aibuna-mobiuple-amara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d9490eb1df01bd6857b386a1611e703f9e417cd396d4d6a15d4ba7c71698b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164019 Malicious code in parwo-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b76ad9ba46a623a73f1fd080c9c3318f76df6d7739e43dfa33172c5978d8b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151018 Malicious code in @miptaa02/weashj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e825dd57debb8f52ceac1cfc2bd6643e759d9e0a73281751dea27bb55d85032d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158506 Malicious code in lookingan-nalako91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59edd01cfe138fdee0e7e49129bf35e0d84fdf4f83969f76bfffcca11408a826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157077 Malicious code in jimmy-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9895b7fb3302d754c54cfb6f7d33b3f6153ff9190bd6a6fb49cbf63d74085862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153211 Malicious code in avminah-fagmas-fogofagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb57f9abf09d166b21332045658f61e660a90ac361bee9014294430630d6e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157787 Malicious code in kuinsu-lukoiki-nsntabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74b785d009aa4cf823961bc128220d3002116f886a671af029b234ac94ad1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167791 Malicious code in teagood-sukuna38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41bcd7948280916b16ed247e066f5729feafcffa521b0c1469f45f5fdced42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167352 Malicious code in teagood-nakamala83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f3a20b8cc387de90f2e1bd7494f41fbff66488a04d2faa358da480081a2ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167707 Malicious code in teagood-namakai51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e563fa9487d3c3795b1d9e3c969d9fddccccededed2e5a1aa7ec09ab58983987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166701 Malicious code in tea-osss-tepan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 165bb57568b88ab88465b36a7451ea9e297f752b9285c6340f92b6624d4a9c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164794 Malicious code in rinto-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fdb2ae2a5627984277997fb44e20d2821797c16c87acdcc66eb899154bd740a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...