MAL-2025-159919 Malicious code in mansioda-nona-mug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56ae62315d2da92def1aac29f4a4d70a85897a392d750591ad58968e5b4883d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170205 Malicious code in uyatu-tyt-daut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6937500ce4c6d7334ac86b454006ac2398b928c3c643148899c4c50a6b6e88a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168093 Malicious code in tealove-aruma37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c368bdf6bf0ac615c01c4e38938af2d8a6e782dab8943e1a216b98468e38c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170495 Malicious code in verify-tayic-alusakilibamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47115b8c2c694bf752797bea9e128e253efb06574dd88cacf143ceb60b67b99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150164 Malicious code in @mipta1/mizdcs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46b4e6756b2c77fb244d319962ef1501806360958a23ba8a15273caf371a4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170538 Malicious code in wulan-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79f86f00e11ce640fcc8a63dbee2fd86938d5ac9a30f8cfde81e5683ea30a8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169599 Malicious code in uarg-mithai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0684fba52be7f806592deafaa6697b90e992f15f08c20a4c4e08fac7e31fec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170307 Malicious code in verify-ain-ukas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debb4ce171e9ff2a0fed8e72df999de7a42c2192905c7d056eb2ed0abf8f2576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169728 Malicious code in uinsnu-lotaihzmi-kulaibnisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2639cc40df3a434bf1d49a3ab057de0ca3dfbe9f21566aa7f887b1eba963940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167707 Malicious code in teagood-namakai51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e563fa9487d3c3795b1d9e3c969d9fddccccededed2e5a1aa7ec09ab58983987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163049 Malicious code in nokire-nakala91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebce55d5af2c49b6cd30931e532611e60e34a792945291c7c40044ebff0f7d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156666 Malicious code in inufgi-gotauma-anafugz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3af69171e14789925660c5c2f0f295c60f0465bf339247f1b1d34f0cf1d26dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150627 Malicious code in @miptaa02/fggkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b5ce8a18a336e7e638472f2477e8d822331c12cc07b86d764c8b7c51f36cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170566 Malicious code in wulan-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e121b35a787253d269f5ceffaa5dc7482bbf4a3e685b5efe960c8e60fae67f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162728 Malicious code in nokire-kore4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bb4c9d43f7e35e1f28479b5f78350886f2313c267b56550f33ecee13a17429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161262 Malicious code in nabila-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fbda564f96101ae28dcec132a3640c1524cb848206e7c91922eda2db807d0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159567 Malicious code in manapf-manta-nutrsida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee2bbc673cf80b4bd6ded50a838990b64e94a611397767357f04a54aaad6139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153641 Malicious code in azhar-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e19e9ef3834858b66d6b3bd17ce8e06b52ab8dbe34975357b84ce427bac40b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154605 Malicious code in dian-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5cd3e314f699d6d3b04324a896998cdeffe83cfd404917bbf22171eea1b123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155391 Malicious code in guras-darusda-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1cacb902c0588bd41b57b34d402346e768a2429a7b34ff6912f97f4db2ad8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...