MAL-2025-157737 Malicious code in kuinsu-lubuki-nasivnami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f45b634b9261c3a1aeee23e90a0ff0c9b4d2aba958ff2ac4dafcbeb3d4300a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155908 Malicious code in ican-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdba4ea815d93ef59ce238102563d0f061f496c706a1691dca59eb206c49c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158244 Malicious code in lintang-tea80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40216ba1fec7601af0a43b335736255bfc458c8d87bff3f9355535b73526a412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156890 Malicious code in irashi-2a1-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb1b2b9bd6840192001b1b57b667f661449849a6ec652fef719cdaeec3fadeac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152404 Malicious code in alita-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7fa1acbdaafea4142d78831ac0de35b0a66fba13befde89d3f990bcfeb4907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159093 Malicious code in mahnud-nofty-gogiadoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff62ebbd42e4edea3556dc34ab5d8980165934cbcf4306bf787f6c43f0f6b1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165992 Malicious code in siregar-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0497b4615a0e31dbdcb419dfce20ec46dddafeadfb32c11e825e37ec77213d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170090 Malicious code in upa-lubalauvalio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa0bdc8af247ac15cbdd27e05dd1902061d20b91114b1d79de857eaab97d982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153227 Malicious code in avminah-fagnias-ifiafgaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a62522c95880abe55de5a4020b065edb806b3ab8164a40cd181f0ae99efb344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157591 Malicious code in keyla-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6f92a4574032a806eac2ca4638b7c550d4e527d4ddfadc316dae818c1269e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150773 Malicious code in @miptaa02/ivdak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8586876996a948ca7c40cef0889ad33c295fd424e11121ef376d188220d5dfc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166240 Malicious code in sunden-diak-i1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66390fe5930866fbf6f350b68cd30b476d5ad7aac09c2124a22879912d43687f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159878 Malicious code in mansila-toaila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca12ebe06cb36425d7f37aaafdd7eff5c1589f89e7e83f4ba697fc0e10f0b28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157868 Malicious code in kupa-lubizfzlio-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ae00cfe08c670035b1f3559e691e9fe1a3bff7305b98db31d39bb6573a4c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164457 Malicious code in polymer-inti-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cadb5cd720701e98705f1db09ac67ce5b961c976a2903ea2931bc18f9cf54de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168803 Malicious code in tealoveness72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555ef9ba73b0f3dd5b0534714ff23ce63e3a97dbea5ae7389b0bff1cb0922631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157501 Malicious code in kentung-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da866c3e5b78398be6a453e8a175dbb76d394223a64c4fcb8e464e8a863e5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157648 Malicious code in keyla-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c827ebfff9b2763377670a3ded0f1745e11a61da55a4cab827bb1830dbafe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166120 Malicious code in slamet-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f36c5cf9dda9b87706a5622d7200d62a827984b3eca5df457ca9cdc9e9851df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150156 Malicious code in @mipta1/misyeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef1a3fd30ee49bf4ebef01da2e1133382d2d14c4b6f93bf59e18a9ad8b451f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...