MAL-2025-152072 Malicious code in aji-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6bdaa32117a881444d56afd2c543380d0a7f925415fe696228cf944daee068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156548 Malicious code in intan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6be42f4cf9a8717e338246cd6d01c2d47e041316a1ae7288d798bf8ed1d534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150421 Malicious code in @mipta19/rykie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a2d800150c4051c800c5d11c9418e354d733abbd56261f5c6cf147a53d5f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163600 Malicious code in nokire-zenitsu14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77167d154123e03860311a47ee2b281dc305388cf3a975266dfd6e010b37f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154007 Malicious code in cara-buniasn-junio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15dac4929678bab29a97760732a3f2d23c94c6166d33cd1966be4b91967e465b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163587 Malicious code in nokire-zabuza92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acde6fa113260b13ca6735a6e6e0deacd838fc71ec525c739b4c020af94a8eea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164031 Malicious code in parwo-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7da549372008b958e2acf9e954b023d381818528989855253bde777313c1d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169593 Malicious code in uarg-masituhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dbe533206028880efc33fa2ca677761cb44c702a2623dfa5e8cfd8ad4449c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168272 Malicious code in tealove-darknest17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2cc9f782d535466c3f485e8edf385dd1cbfb7329cb5603cfe508992ed0b9b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166359 Malicious code in sunden-udik-vakliau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ecb814980c06ab533077cc171144f1942e871b2bb382d80dc234782deeff3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169347 Malicious code in turisna-safsa-reaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13126d666a33a89d321225d3e2733297f909c7f93ad5ec36b586e1130af5064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151014 Malicious code in @miptaa02/weafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76a95cee3c1281e4831d3faca74b8c2f069a776e4b28b6af4170cc5a9e74dd64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169946 Malicious code in uinsu-lost-diunsavvuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb13ff78ca73998bf5d812bf5fc62034904696d9c7f23f87c8d55fda6ba4399b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165194 Malicious code in riyanto-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d63b1f123c38568e072dd7bc48ebe26e0d0e559afc7fc95f89ef69748e6958d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160236 Malicious code in mattu-mitboip-butada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a0654c4a25365116fe1163b5517f45ef1f0f763f933f7e9bbdceda7ac0d9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168635 Malicious code in tealove-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5114198dcd121dc665bf7c33e0993310adf8e8a346c39c7b1afd69a419db01ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150140 Malicious code in @mipta1/mikaas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00920722856d19b1e822f7fee8c1fb13a670f65b6c958e941129305633b99a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169894 Malicious code in uinsu-losiat-dvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf88c39e932efd5b4806cd215ab8722feb1fac840a8f8f4fd86a1f9c11a8699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155925 Malicious code in ican-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e3016bc6c2a26acf6c94ff385cc0549911e3c2267a95fcf6fc78afee8a9995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167661 Malicious code in teagood-namakai10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a43e412e985923379edd4cc2ade4a39cacb8562a397a51821acf1a9ae3950ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...