MAL-2025-158627 Malicious code in lookingan-namakita19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5b9d92f1279b3d21537cc2383c32c111c3add8e1ff09994fe76637229481b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169699 Malicious code in ucok-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa936ddaae238d30802aadb009148065a41bc7dc9d67220da976c6ab7f7a0e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169425 Malicious code in tusya-fss-s3da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbc5e4927373b6686197cb410011c12e83b050d70e1c6ea1324f1579b9c2f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151113 Malicious code in abeh-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f703b80cdfef80defe71d7dbd6c798b1cdc626bfe26dd9ae5055cdf2b77d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165117 Malicious code in riyanto-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b4dc2c21e14ec83f1e64e59d9e6ab61f9e74732f47aa581b7b04efc60d0268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160576 Malicious code in modira-fuhopia-janaduri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f165de9b3331e8beeb85a7e7b71425f7fe9ae127ce692be90c288595eeba5422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161591 Malicious code in nabuf-otoiman-igio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919597a177927004d9d91668a6ed38467110f9577cbf4d307c8a874a2c4e0480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152346 Malicious code in alita-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fca098c1a2eafac3f042f0a8c68039b3820c4fd59c187c1047cde442566849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152657 Malicious code in andriani-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5cbf85bd3f4932dd662d3121f1406579007eba745709731fc1b93034a5766d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150786 Malicious code in @miptaa02/kikia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc530f1426bae40b5743a56fb4beb4a7d7b9393c4eb38c5c9a329880822b1a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155900 Malicious code in ican-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bff3d3ae7cc9acba1782d8ce836464dfbfdf25e260114f7da8c9a36ab7d4350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154388 Malicious code in diago-kamoli-liumaaaoho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef986dddbf13b00a1316d008ff9cb4e7a9136ae942af74c77a9224fe1f26f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166571 Malicious code in syahlan-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46123b14a4da59424b77092441eab5b1d3a03eee3c4e71c6ab169e4ec7eaa0bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169400 Malicious code in tusaaya-sdss-tdesfsrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce761364a74a39efcc8d6671f2716e204de6bf5781c3f79bec2b86c397d3156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150849 Malicious code in @miptaa02/mqwjsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe26b96d9a17242e214832f65bc4f2013bbaae6a21e1a1a5d4199a6c333a02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161165 Malicious code in mutrasd-sadiss-mutrio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01aed6cb19d74f01bbc0d301ae14950e10fc7e6be70dc693b486a179e8b801a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153058 Malicious code in avminah-fagiaas-figafomka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dee32ab66895715af169c0c15bedfe2b110e87d5a26663eef687a8522060e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165750 Malicious code in sanct-cookik-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667db6957b5e5c738940e60e32f49fdfa410e582a4adf2fda6747ed36b49f45e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165860 Malicious code in shilang-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ceedce2b51dd23f28b005a7465762979944892a76b460e11b7bf1e4b3c0ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159054 Malicious code in mahnud-magu-naufam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c58a5177cfccc492a5c3b38fd076fc9a7c1d3a4fbd115810571efb74700bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...