MAL-2025-156003 Malicious code in icha-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df484e90ee86d0283a12b714e53f3f480c2c31ab8cdd349ad9ac562b8420987f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163929 Malicious code in oalgo-kilaso-akiamako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b089b0cf4ae11dce7650dac477b0638df6f37982a33bf92189e10bedf4cadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154877 Malicious code in fadila-poke142 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b28474c53743ebed1b71760ddf36371f566ed784415aa2c43a499661b1460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161976 Malicious code in nasrul-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d238435e19417af9ece2542ef4ecc32278780315937858c1bf2de5212419e999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150895 Malicious code in @miptaa02/ralsazy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed2682c9aba0ec86af7c9e403c24b87ef03d8e8a5434f995e570c5be59e83f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159541 Malicious code in manaf-matfddu-masan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38229d5ba6eb0941c4a6e4d8ea42e1a325643f86719c7459dca584d7bc8443ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157211 Malicious code in jurss-sdfudd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79eddc59bb08bd3ef048e61896841709a00d34c37b23824ab47703b3cb36cf92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154423 Malicious code in diago-klop-kalosibk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135684f560c88458177e1d578c86f3822a9d9c4b86a922f1d78a663399fc6ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160808 Malicious code in muklis-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78b8d31f5606bcc5225757c7f1bed6fcbc71db2d88df74a5fe546ae6facc322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170404 Malicious code in verify-ayica-amuinbha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fb8ebec8787e7e3a10060fd55f75b2c8a17eef60749c3796a1412ddad5a2ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155232 Malicious code in fitrok-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f000f22826a9ca8f3258c89cbbe5544f12108a90e9c3c945c16d8852f207fb0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165132 Malicious code in riyanto-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d992262c16caee3aa31b8db0cb34e8d7ed7169fcbf5a0ee359452e0272976872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168771 Malicious code in tealoveness43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e638b4c879d039bb8f50276d6ab2725416159e55ff682f4481e14a3956e890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157895 Malicious code in kupai-lulikon-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1c8199d5ed2127b13c0382e494318082865faa021b0f69520beed70d09c0d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153997 Malicious code in ca-buniasn-junio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2007ec703e734811df0b986780f7601a78e0b81cd3f3c90006a998ef65dd402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160675 Malicious code in modirai-igno-jihifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff926f5386a4b7b6f016022cc2b6490f1c35253fdf0675934d669d79001b5568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164760 Malicious code in rinto-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e89a5f3483fc7791d933594c516e77a1e6fce3094b02ad7b2aa069883a7dcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154215 Malicious code in dajouka-tdua-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f0944d48bc92a95141b3e9ed8d1b566e046154b8bd95380dcfbfc67d01a5f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158428 Malicious code in lookingan-nalako20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f9227df2137f6177b8a5df6411194f7c7b3d6a627354a9425930a57f90c14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154027 Malicious code in carva-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c38a855f05299d6c02430a6999d7cb56d6bb07495f740ba603dfcf9eb436dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...