MAL-2025-165593 Malicious code in saku-ai-upusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 720b8ee13ca3b3c5752b7df41d6903d98ccd752cfe623087d6b711ca898d0995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153402 Malicious code in avminh-afgais-fafdosfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a91306af1e9d4bc8a7e32da678391d5b9ad9bcc872f4a78cfa3b9f556492c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madrid-ucl-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f65dc8748889668fe20d1e203beb0981932fa01ff4bba131ebb214ab4e01e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159738 Malicious code in mansida-nomafdi-munau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a968dd91562dbce45072380e709dc27ee1ab0e3845726b9e466ec2ea1d4e92c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160093 Malicious code in manurung-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd68e726b040ba3ccc2844b94c0b18755823a38312c9a5a1ec263fe45f033671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154275 Malicious code in demdadf-sadudar-adat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee15939633f516eafc000698ae1fbddaf0b00c1e43c1b0bf5fc03139d2b7ca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165128 Malicious code in riyanto-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf30b97135b10b0f6702bb288e356e855be1df2f14c4b3e8c40a1aa46449d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a68fa02524749f958eb11fdb3e6736386fea45da0055a6a7e6004170a6d0b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154819 Malicious code in ewa-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75625d8ddee542d9844a25c67e63f4c03bbf570737590e1088e0a32c95a205c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151172 Malicious code in aben-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de46c69de3a267e4dd9c309eb368eeeabd5a84859e0008bdd9b4f199ba1ee58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d0858472dd4456bd967b8334c80d965756674bbb1f5e2913a9f71da76c6b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154995 Malicious code in fatidra-faradda-nutdarddo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55314bca4ace262a4aee35fe3df88851bfed02fbf86cbab11d7c08ec9ffc168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157809 Malicious code in kuinsu-uiu-vinalimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b389759810716cf65f400936fa538df7f3139ef6d65cd6eb35e3b9b3db9bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152205 Malicious code in alfiansyah-pok10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749a69aa245e63f23234306119159c19d1670195d24fb451225d23adcfe5c16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157501 Malicious code in kentung-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da866c3e5b78398be6a453e8a175dbb76d394223a64c4fcb8e464e8a863e5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166748 Malicious code in teaa-reborn50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c0beae572cc2ca68324e293529040331be099794573f0dd06b97bc2ea0b81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158064 Malicious code in layla-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ca52036783d7ec18a0ceb7080ccbfa6a691afe8cb8180f5362e0c4a0ee1479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149936 Malicious code in @mipta1/asaix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9e2e96dcba3be0618b9d5209c8c9bf8a9c251a4943422f799a63ec0da8a37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-asi-manta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c61b1b0328aee4d9b69f472308791cc260a44bb02fb6b305aa799da2039058a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157063 Malicious code in jelek-rass-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ae9f238828514908075c3d621af7028bd6f4a8a45882130d0bec53c5cfc3abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...