MAL-2025-160604 Malicious code in modirai-fianu-jinanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8469ff2a5b225f39db39a8215bee11388f7782c280db68754e735d338d6f7f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158382 Malicious code in lookingan-nakomi24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc668d093a3c5a1287d44842c7c9393e449d0f859378c07e1b4f9838459f642c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165074 Malicious code in rival-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68687e6d618a103320be8791d6899ba7679b4e0505a3c43d2ac1fd657505266c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164761 Malicious code in rinto-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad1942dd6eb446697cf571a0edd13fb6f72dcd180de6779cdc4e7e33b33a10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151826 Malicious code in aiboa-mioloipe-agigpnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1347be51f0c2f7e33cca9f6daac7c038161dd60b9fd05a5e68d6265e6a25dc57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151627 Malicious code in abuyilani-nikama-luyabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9afe812a1f01c1c7dd46de06a4606c11ec712eec4209a6d25b3a0101be3e579d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156293 Malicious code in ilop-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6626a35656cfa5139ec4514c0d22e4a2b4744412917e92acfad2a10eb71d8f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150689 Malicious code in @miptaa02/gfozsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa184be970060ffb77903c0f1454a0f71f3db08879ad2720b54df62962e623df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160823 Malicious code in muklis-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e5f21c111d72ec25bed4c15f48f90ab6f1e0c26149552b3f626e6227951b58b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163810 Malicious code in nudela-ofgfaf-gaagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f69960a0d8060c16487e1013d3df5f3c7f5257221b839ec19e3b23347d472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150026 Malicious code in @mipta1/gfdudgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc4634611c21dab150c1937b29ad251c0301f11f4f070895ddd5967378481bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164097 Malicious code in pilau-akaviu-kionalabua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27fedbc0de5ce9041c6c5539e3d1284ddc82ed8794396c390b4ae21345163d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159399 Malicious code in manadsi-scdor-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84e2dbc9fc09832822946e28b80dd9d434ed356cc91f540309c1a71cbf4788d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168072 Malicious code in tealove-aruma18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d8de7d9ea35970c288d0f363e829369e068d342062e77bc41693ae0ff6e7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162327 Malicious code in nokire-arhani17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e134c5c9c93d847d1781e53711bff70c6c1e64bd521dd579e5c8bf84d10e41ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155554 Malicious code in gurs-nurts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442498dd03307ac74a89dcc3578f25d191c27fbc89b06f60bcb87b26ea063dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168299 Malicious code in tealove-darknest41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d9bb3f0a06de7ad77d6d719807d06db2b7521adc805d5af53bcf3f17d76c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168420 Malicious code in tealove-nameka37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d181f56d9ca2babe1e9411c885887237cd5fd36539566f24dfa3d9b7f6a0ea6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150932 Malicious code in @miptaa02/safa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c92547296a3eb6aafe05ea5bf75149a7e14c51b61f4b97ef9bde0981dd9d2a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152029 Malicious code in air-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70902ef95f5216486736aaedc05d335c6ae9f52f81729832bfea6e21b99af31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...