MAL-2025-159568 Malicious code in manapf-manuta-manssua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b0f8349d1986d09a4c35e69ffc886f4d130df0f31e846911166c4807ac4b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161034 Malicious code in musik-daistv-bodot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbe5fd834d8957074b644433805a1c25aa1b3dcf1569747bd368a936a532396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150293 Malicious code in @mipta1/tyua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d313664b07ab718c4effe676ae862a48f5f52d93e8cb2a4893155bfca998a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158192 Malicious code in lintang-tea33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09291a8b5ac51d5820bd33c300e9a0718ad24f9ad283359abeb4d7c694d99d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161014 Malicious code in musasiak-naik-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0681a90b29c7877cce234cfda9a80941e330d9998949b71b450778a371d28d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159878 Malicious code in mansila-toaila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca12ebe06cb36425d7f37aaafdd7eff5c1589f89e7e83f4ba697fc0e10f0b28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154995 Malicious code in fatidra-faradda-nutdarddo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55314bca4ace262a4aee35fe3df88851bfed02fbf86cbab11d7c08ec9ffc168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157648 Malicious code in keyla-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c827ebfff9b2763377670a3ded0f1745e11a61da55a4cab827bb1830dbafe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163298 Malicious code in nokire-rara12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1747b3e4ff61af9fe5be7ac0e16e86d18b1fcff80d0fc0c017b761b94eb9e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150270 Malicious code in @mipta1/tifjfx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507963ab6ec770480c0aaff477f59c6f3b39ec7c0fe33f3e8ac2d7b82357799b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153904 Malicious code in buatafa-btra-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd7abbeaba75203e670731efb5a0ef24aeb2c555563cbe8f0491630c0eca915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168454 Malicious code in tealove-nanami25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dea1c13d163f5d452bc4fe129ccc483ed1f3b09dd7ec6a38f11560bde39bf94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157867 Malicious code in kupa-lubizfzlio-igugfsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95dcdca321708bb8405a95c38ca282fe4965257bd624c449f26883f34299800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155374 Malicious code in guras-asia-nguye (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1adab17972c15caa7faa7438a08aaea1a3eb8fd14d8cd0735ee2941bc92f42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155314 Malicious code in gifa-otau-uasao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34c99f5ff421606f908157f5d9c6f504b9fe958c9c1c8bc8d1a431f1aa12bd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157529 Malicious code in kentung-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623851317e0ad62c4baa83e63fd2bba810f3ea7f721b2351931fee8df8532a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154910 Malicious code in fadila-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ab3b9a9186bedbd76a8323e4c13502c46976b97e799d3f5e9636f812692857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166955 Malicious code in teagood-lokika86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00d1415ecb85489a52c1ed265c78eae08fc26372eb55e3181ae415534bf3681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156167 Malicious code in ilal-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f22e09af78cbc9afdd16cbffeb5e226a4602e9e1dcfbbe53b7ad82294be051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153055 Malicious code in avminah-agfifagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d0c921de549bb95c3914920378ada8c9e0c5e8ee89902327142fc6868ac398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...