MAL-2025-159646 Malicious code in manda-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f6d043da5c01e5fe704524d2a74bc731bf8c944bc0ed0035dc9cfc355349d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160333 Malicious code in messi-oip-tungg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965e93c75d941255bc02fed3c7e69893aa25f797aa1620e28303f11e2d3b9528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150392 Malicious code in @mipta19/p5sa1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593dd6e79b32a87d12fa14df8e5fd630f3e00604cdb4892b444c277bd1d9d455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167849 Malicious code in teagood-sukuna90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6347bd2e8f1ea239adc023613607cba7923e08f04c05e740ccd014fa4526ac9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152755 Malicious code in arif-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af34024b34fbf300374d9ba0d94ca7a568a8289993b0c3a80b42063a2551b7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165830 Malicious code in shilang-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0459648054322e1e7e43f44b4db7520db5ae9fecbcec3d4760a418c5e5769218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157007 Malicious code in jeep-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ddc983769eefb438f9559056140c73efd21a88525cf0cc4c201333e416cba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153254 Malicious code in avminah-fagnimas-ofisugogafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97e287ab46b5271854926aa69d402b7bcc7024729f974539820d4616f6591e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159989 Malicious code in manud-nofty-muatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57972a37eec9415c9942b2c4971629cede47587efa7bfc588527334caa3d632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150853 Malicious code in @miptaa02/mura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5150ddae4a6b14b717f2ee16b2fa91dbed884418607fba17996bdeb3eb5be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157093 Malicious code in jimmy-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2062bf37ed550aace561e68187e7ce7ba486fb0f8f3c835b6e5115ddd95deed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155482 Malicious code in guras-visa-korea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35cd69449148848ad2be5270950a319eb89e89b8cec245c56a505902408a4fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159152 Malicious code in makaia-aniaa-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30bf5eeaefc20e390a210e471c7cce00ad4d3ed07c919f654309f6e30900167b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169494 Malicious code in uaragifa-aat-usafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d373baad5dd18485b8204709acaf2cbc8be028df0cdd14f8823d4afd264f1fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163134 Malicious code in nokire-namiresan78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0634d7ebf264f87a1aafdc0e40e6666032fc711430b77a5f24b00bc09e4e91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166029 Malicious code in slamet-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb49a99078bffe42f4fb5b8af2de586e9b63533edea807fac2ee1ab8ba111d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160723 Malicious code in modirai-imgno-jinmnanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6390e37727d6e73a68204058bfad0a90a1de39ee9baffd33c2d51c0630a89d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167101 Malicious code in teagood-manaki36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172bd60b476bb0a3072304e6b1f962d9aab8deaff60c40e7498242ca1d19fb31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156819 Malicious code in iqbal-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53621f5f34ece675fa8b486f5c1838c188cc879372a3ece43b46f8b4c9ee043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153450 Malicious code in avminh-afsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d9d71eaac64cbf261242f3b7814c0918bf01af3b2076835a4b474eb33e4a8f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...