MAL-2025-155987 Malicious code in icha-101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20183fac91c7dd314ad351b599486fb0aff2040e11e58a67da3de9342c4dd6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157257 Malicious code in kamasada-buyda-butaania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ad5ee58fe0b5e7a6b4db7b950f756a112e567d47cb88a1b5ee5b3ab27c95ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170506 Malicious code in verify-tayic-iamsunasiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9e162f9407023789b23cd1f5e8c525e95932485f297672a2c04bf22782c7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154827 Malicious code in ewa-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36ed72167f301946b76533bcb326fe73f607f766cd257b225053b7e54aae345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165484 Malicious code in sabua-muyaig-dafima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa223e71ae2a67471ed4f86c662afaa0f04405bcc0f3cad41ed28cbdff48d137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156479 Malicious code in inal-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389f75bc615b9b462bebcdb3b789d17bdaeda25d1631385c5f4ccbb8b733c70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158876 Malicious code in lookingan-namalaka62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec4118b37f2a9013cb0b228c0aa231f6a3ae58d837fb041bfe1c5dfa61b77f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161476 Malicious code in nabuf-otimon-g0afigag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789f05829c2d5ae56c01da32da6050cbac3160272925bce10be5219b52972bda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167769 Malicious code in teagood-sukuna17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4aae540eb7313d1ffc0bda381c8835b3cedf813922ec68727009cd4a15ff56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163357 Malicious code in nokire-rara66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa1b84541c89c24bc9db38f4cc835131d5f611486d354bda64242ac0d7d1fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166438 Malicious code in sunderlan-udk-vauki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf82f385a59988c6e07d84bfda35cb63d8a48b534ed9bb348c0a09e1d2d492bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153318 Malicious code in avminh-afagis-ifada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbc31d88e30c816ee42a680f0c29054d8ac376ebd25b6bf5441713f5726d2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164000 Malicious code in parwo-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46036a44fc9ea14541a7e6ee28161307646cc6e3db41e92d2705ae20a4bf6d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157603 Malicious code in keyla-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81bbfdbefeecacfaa972dfb04e693c94c2606dc6fce520210febea670488fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166412 Malicious code in sunderlan-ud-vakumanakli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04c3a6cccaf77657d51b881066ac7cc023458b38d4a6af0c405bba372a65fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155809 Malicious code in huda-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252742fcda4829fe98628c1ba696f7e192bfa41c0d0dee87e0741a93cf8b4faf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169575 Malicious code in uaragifa-t-safar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb89ff3618abc09f2fb56016b2f21067a22b06bef05636aaef991dbd863eac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169246 Malicious code in trevora-cir50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad178ed6c069762e45a718918c8033ee39251635327660f9f6757d3f4753b893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154131 Malicious code in cinta-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1160ffb1ce968341fad746db182ab92b48a28a8f715b41781c5cc65eeabc6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163873 Malicious code in nuilava-dakgfrae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ee3009f5fd0dc2deb35857d5e09615252087efc056071e06bb08cb138ebf17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...