MAL-2025-159308 Malicious code in manadi-scaiasor-didafra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8bce9ab507774028903d000d884d062ab098fb15c5d51013486136ffbac5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159732 Malicious code in mansia-tavil-madolio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11e76094c49f09d0b1233f3ab023c8d44d2268772ce7fc1b55e4e8dbffe7664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151011 Malicious code in @miptaa02/wead (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660b504c8868719843a5346fa9e031b6bef0bfc370c3f2806901c280cd842f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154857 Malicious code in fadila-poke123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e1bf9e5f94b0a106b8689b61e016d1941dc6f843e09fda8ef753f4cf4a32b86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157667 Malicious code in keyla-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d995ea79bde2f581655110b1bf8a6f7ccc4bd78720fb457d20e87d3715231afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152188 Malicious code in akanabi-aliga-aihmava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbd9a2ac0a084d855f1220bc45425fe46328fb73e30a3e6db1cb6c5dea4bec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154890 Malicious code in fadila-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc46a6add0f5d8bbecd4e3d2cb455d0fbdbb9dfef39224019da7dfe1f9ac26fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169473 Malicious code in uarag-mafsituhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5b94707f7d17ff744d6579c66bb3f5a7a5910b54ed0e21828c69323ae580a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151443 Malicious code in abina-mibon-aupabmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d31104146269573c91f0d6e1933c9659995f6c061197df86bddebf25dde9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152526 Malicious code in alvira-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4827d57ebb8edcc2c9b9f56f4fca6ed1d304b655e99e9c4bc8134a03a49cd249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157601 Malicious code in keyla-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4840e37b4c52a5531890eeab3169b17cdc55b8a9951f4c7c8ece98a94abdb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158998 Malicious code in madr-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dffee132760cbf57c5ea208e17e605f6c3703ca33d52739e32e3715a2aac67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163595 Malicious code in nokire-zenitsu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea2ce0aa0e345e521dbcef9047d946bfbb930294f8f3cb08ebe4bb620637d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152375 Malicious code in alita-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b3a5b3673e56190105951c9d7e5cd5792f17d46c41e941c3582d2973536e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151235 Malicious code in abiba-alufuai-ayuba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39466c6343d5e0e29c012e91c433337f69c5d796f02230e0318a908f1a62fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153452 Malicious code in avminh-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e672b6d1618a2ec87196da5c5d587d193785daa40ded05cd319a4598ebbea74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154933 Malicious code in fadila-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420af1b41ab32d6e711bd692260570b52fae6d54b71c53c0d152045db69d133f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150704 Malicious code in @miptaa02/gzaody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb106892914853e071fee0633abb1a36b24bd0d42e4b8aac9cdf1ef0ff1cf970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165573 Malicious code in sabuvauli-nalaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5e2abb7af1626fa28b89cc889444e0510971c9ee9f43deb7ed24e5c7f0fe3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163972 Malicious code in parwo-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ce6352898305081909e9966b59a7e6f49ba27f174a11a51b13a456cf242f8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...