MAL-2025-153926 Malicious code in bufani-muyu-faug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfadce912652be3731b6ea08eaabadaf5517c4175893d9aa947564127f929d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158790 Malicious code in lookingan-namala75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e04ab38e2df3a0012774e8d73671af7f484d750005413c4e95614fe3cbf01c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158244 Malicious code in lintang-tea80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40216ba1fec7601af0a43b335736255bfc458c8d87bff3f9355535b73526a412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154873 Malicious code in fadila-poke138 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54fbdb7c09d6cd4cb29175bad8df277dfc4388626d33f384a170340b3cab0ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164994 Malicious code in rival-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c863d8caacb8bff573f4727d4fecfc0b4140b8d4e6a33da7ef005e9adcb3ce48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159762 Malicious code in mansila-iala-maolui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a50c745775c0b617432502f83084faa304dec898e9af565ba940dd50d32061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168596 Malicious code in tealove-okta2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a539c5ca8c5f1d145bedbae845b3d601866b16a53d8bf67e2ef33e123a4a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169732 Malicious code in uinsnu-lotaihzmi-kulnisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f97c00f0230559234346d54199d04baca0758dd51b34aa7a009ad126497a0a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168738 Malicious code in tealoveness13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c84125394058cab54c1d13f7e2417d64237ae04db091d19989d57f2829ddec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5dfcab22a959410c0579677e9ff21e82b0a756dd5e8386557b2f2950e1c755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ca435878cf8518b684ccf74b8edb68ff924e94861e97642a9e5040efc1edd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153161 Malicious code in avminah-fagmaas-adfigmaasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc41afb4d09f49691da54ed3b026b5cc92fa57f8aa77477cb657ca24d74237e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159806 Malicious code in mansila-thfla-magahboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4449acd7d3a57e2450bab6a91f4e52bb6335a89d97485d6c484553cf4eeced8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158105 Malicious code in lina-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa29552954c3331faaedc4484d79275d9e4d74b4d21fb871af1deb074c660e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170177 Malicious code in uyafru-tufadat-darautut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046a652c676cfd2f219e48633d99675327ee4abf47e80d41e6e6135973657f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157939 Malicious code in lala-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6696680fff806f1f6f12943c107def4c0958c87e147b642ec9b0757966ae7387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157020 Malicious code in jeep-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62a0264846e000479c61b69cd70e02c1e94da7c8eea99d5cc726ec5b1b30924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168204 Malicious code in tealove-coki46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1240ced41ba0e096caa75e60e9f531d837fba06deedde57e054c0ee9b2548a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163823 Malicious code in nudela-rahaf0fafuheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33913d4d5409e479fc98563fef3f5449e4dbcb0c376fc1fef7da271f822bbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150920 Malicious code in @miptaa02/rimyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11dccae47118aefffc26327978cafb5db8018825e73cf3e3753abdbd4dd98b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...