MAL-2025-152345 Malicious code in alita-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867b63ad31012beb59d5777c9c5d23f8bc649e3cc0f627c8af35b3a0d494909a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151657 Malicious code in abyikula-nionai-lausukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ccb71f6fd335e58f1618de6ae019fba0595b0e3ec54ee6562ba6c9446c68877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169271 Malicious code in trevora-cir73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67e9ddb31e2bb9df058051d963b1e10959139180a3dc6720319c72e05861b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150119 Malicious code in @mipta1/micddds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ff8e6f2e0141545917b473470a492fa215a98a77f00e8a4b0d2362fa7ea91b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160773 Malicious code in muda-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ff0ad1121d28125d306eb272362fcaa6add64de6f42725a1a55141aff9be7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165515 Malicious code in sabudaaopa-muyafafg-bafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b06bf9857ea0d4797ea0f97006e06079e74652b54718888c97564612dd12765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152946 Malicious code in astia-alabki-maloosiskiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9fa31e844c22cfb27e0b509aa50ca7ab1b5918abfc0351aea20306ce6e0457c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168450 Malicious code in tealove-nanami21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a97eb8583aad11aad3e1c6aeabca6d88626cc532deacd9d26cbcc331f197523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160343 Malicious code in messi-tedda-rtaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36739f8829d7bdd89b0785c5989edcf75ca73fcd6c76f43b87bb61728097bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158238 Malicious code in lintang-tea75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f442319cd9f3bc3243579b6789d4a624e35751abb8cd1383dbf7ae9dda7b4e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166257 Malicious code in sunden-diak-nubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba63a683f102d14c98b49eb8ec2e16748643498fef0d2003f615cb26e0ed390b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150523 Malicious code in @miptaa02/asdfzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf73f336c1dd1acf4313987d10f1c94158e835135681909189fe38b66e33927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159610 Malicious code in manda-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e37e35407ee8f6d8be71fa71774bbd2e93a82bfa45ad4315ad60cd81903db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166603 Malicious code in syahlan-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511b376caf5e363bc753ab1ffef51af9b11f43ae4cb77c1005cbb193088db9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156003 Malicious code in icha-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df484e90ee86d0283a12b714e53f3f480c2c31ab8cdd349ad9ac562b8420987f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159356 Malicious code in manadi-scior-rda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9289fd6a00a8eb3bf1da10d56fbc57953ab44d57692ef3203ce934b124a3aa05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151315 Malicious code in abih-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ab51e75c7d9fa5ce68a20dcdfb72537cf0ef063b9a99227dc3bc5d3a77edba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153818 Malicious code in bitha-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31690dae64f4b4f568f608ed78d4a88009dea3eea86bfa0b342513f895f70d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155054 Malicious code in fauzi-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323b9482823baa791498b54ee6ac34c1aae8a76d66a2056ff3db8a2b4ef7f6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150667 Malicious code in @miptaa02/fseg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0472ecdf9e367f6570f015efd7125848bd92e6c46177edd5aa3a50cb87582945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...