MAL-2025-158459 Malicious code in lookingan-nalako49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becc161ed93b8336d000321add1b0b42ff2dd0dc6be6b53c4bc829ed0765c4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159149 Malicious code in maka-anima-gunalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15a786ef8e59907f5699af8cac49c823f25d2e49f4ecd05e10dd35927d2c5d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162883 Malicious code in nokire-loklok30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6e10086154945d4dd324d1f0886ae780df842b263f8e9ea5d0755cc6444e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168162 Malicious code in tealove-boy8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e51681516a44759209470d4bf83232ce1964a3a3be2f622b466e922350d308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162498 Malicious code in nokire-genji12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7fa42cd8438e718dd20f739522fe74552ab36510a99268486db5395d4c5567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152796 Malicious code in arif-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ae3d30e498943380f214e38ce90ce0abba70d986095fa4817bf4045a153c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151509 Malicious code in abiuna-mobile-amaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c10c0b3d6d4a91ad49d944df149147c12166c98c37c1c2f93f88373f9ef114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159894 Malicious code in mansila-toaviala-madoibsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d2f9411e0bc3880cd7ec26feaa22d7aaae7db93d1885e1600545b70685cac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160067 Malicious code in manurung-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10421acf16619015bc867ab8d27fec06690b0b5643f0c4bc7e5c2edcee0b43e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156785 Malicious code in iomodra-foruai-unai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244c55e233dc4284dd6930ee1ea875be030c74f716bc8655c11174fe26dd72fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170323 Malicious code in verify-aya-al (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe49e854047d1f9cc460fc59b51e74504c4704693d86d0cc424ac0abcc88f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166678 Malicious code in tadashi-tssu-rene (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34120a88083bb73b5fc46fd1ab88ac2f47981251ad1df0c6f07b322d13e7715 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168995 Malicious code in tehah-miss-br (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a09a93611d5e4e6ef96574356f2e84196488c2f846540f7932a60655201e81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167783 Malicious code in teagood-sukuna3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da4e732cf0d4f20f7234a0a46f5e9c218a85caa315600b66241a689e03f34cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169841 Malicious code in uinsu-list-patulia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a46c226c060f9cf30031ebac1a727ef219d44c3f8203c839d6dcbc039ea422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167108 Malicious code in teagood-manaki42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c712dd1da353e69dc6ec3f5e2a73cff4f5fd119a933fde692e86e1acf84364a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150670 Malicious code in @miptaa02/fsgkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea0c986c79ea6e0db1c81648a887318dd4eb9d50d684a7b86986dea869cd474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166647 Malicious code in syahmuda-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32fcaa830d9f628881e49a10eaac287a95806d1ed8c226026f95ae0ba36f25c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168457 Malicious code in tealove-nanami28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f235383942489121136e04ec4cd31a6a2cb7d1909c10cd2f5213d7d08cdb758c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163250 Malicious code in nokire-nana91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d48c305b30e8afa04cbbe9a948f8c846e35f38b438d7bf9b5250b59e6a72fca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...