MAL-2025-164889 Malicious code in rita-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86f2f4200e53df852f355f2b775fbc9f90dad6a2eb45551f5aea67f5a421804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150417 Malicious code in @mipta19/rykdie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce783c17d272e0f3d578e49323b11f679f5ed48c164281c68b1beff96b481e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170340 Malicious code in verify-aya-aul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b04a85e4e1d88d16f0cb54594b39854a0cc1780616e7d2ee8ffa37e99b25ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164518 Malicious code in prayoga-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa8f8106dd774968c542459426633610e36e93686f073dce1bf7a870da5b6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159746 Malicious code in mansida-nomfadi-mungu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a5561a4f7163a6867b10316968ea3ade23113c2ac02fd57dde730d478b4e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164425 Malicious code in polymedr-mindatas-buipenaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098d8b15a49fe16b9f696a04ce0f99165d36b9d23c5753abab8acbed65fd7daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150385 Malicious code in @mipta19/ns-o1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d7f47d2a091bf2617054f6775662ba5169506a0a17f13c3a9366b2d6f2e8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153363 Malicious code in avminh-afais-faofaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288fb8585f2a6aa403d407e3ebb2548a9ffabd6571927d76226417b7e966509c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157026 Malicious code in jele-hentai-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1253f07ac83cdc4c158a5af423cfcb2f0fb79547a9cdced334747b564703ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167245 Malicious code in teagood-nakama77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d1a2cc928fc736fd0e73d0d4bc23e56ba25225a223de4fa4aa5688bce08350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150584 Malicious code in @miptaa02/era (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008c33170aabca7033f785c8b27c8da7bad9a9e02bf8fac7396886b2cdb5dd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169525 Malicious code in uaragifa-afiat-usutaafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13dedb7d14bd925916de1f5fe29209226b326f552579d778f506ae8664be824d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154460 Malicious code in diago-kuli-luvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e73d01905e58f3c27470c958ba5402332591ae485bf4fd6ca80992cf432e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158929 Malicious code in maalasha-nut-belig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b277563bdbf602e231f547178ad2327531e0fe39c286a37e0c87483537f0e4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149960 Malicious code in @mipta1/asju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab876f8b4e96e5fe8d52779845a9580ddb3deba547091ef39c77d37114e30f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158105 Malicious code in lina-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa29552954c3331faaedc4484d79275d9e4d74b4d21fb871af1deb074c660e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152566 Malicious code in alvito-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bfd6e64b483aa47133e48cb9e32d95b36b860df07683bd15613b5b5f2cee4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160538 Malicious code in miracle-doki-unisiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191636dfebd9c5002bc52e8d90e83622a682a893ce0675c5a9925ef029f520d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167002 Malicious code in teagood-lokina38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6cd71f4631d98f0309d9e924af39d7d94979e137fafccfd705d544399b96e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160560 Malicious code in miracle-dokoi-uniaaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fc7726b2907d394d66aaa1379d5408f57fffb844cd0e7383bc1e9bce07ac2a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...