MAL-2025-158833 Malicious code in lookingan-namalaka23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265af41431747de7465d7ecf970ce018d476c454510b68a602ce45a136c66848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153160 Malicious code in avminah-fagis-igmfyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7992eaceae0e72b1072338715f1a1e4e64d05c3350699f24af36eb009a75faf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170036 Malicious code in uinsu-loti-nalsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f191b07a669075a07cab246a1281ce723e7c3b1c2dadcec809434d7f4668be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156174 Malicious code in ilal-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8552befc83643492ccc61d3b7301188b6a19085a81b2cb5e927ef1302b21d523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160303 Malicious code in messi-buysa-tytsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4330d813d8212678cea131a0d928a9df9cd9f15cf8c8b75ab2e1c0aba5ac0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166159 Malicious code in suharta-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b340e5ddd46157f3b8a799dbb2b55085d903b5ef562d48fdcd2a3e20a944022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160186 Malicious code in masilan-of-doto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5488f607daf345944000fa150731c3e7e37ac17940a73e2fa981d3d556ecc009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154812 Malicious code in ewa-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ab74cb33678fd7c193813b112c68ea5812bded85ea1a07e9d325bfa4afc3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165382 Malicious code in sabua-muhuyu-tadaafdai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8add3f0a2751b9eec2f7aed1f2943a8a70786c209f5bcf4d7fa34194b2d8054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164968 Malicious code in rita-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d96ac8e1d867582d9cf105ae5bc7e7125fe07e35b39666db056b350aea04946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159461 Malicious code in manadsi-sfdada-mivafifd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c69f5d5aa3142f4deed5d5aa743047e4a30e7217d89fe3b36d979fdc695e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158791 Malicious code in lookingan-namala76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcdda1d1d325c9942503b53e1d04e12e0fdbb039cf5e5ff6e665b1579ab2392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168900 Malicious code in technical-alonbio-tola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a748f1c59925cc1d90356c69518751aa112d4b2527247d54cee1523e7fa6424c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-nalasaublui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9afb64998d89fafbec7f3f31f401fcf208ec62f5e7c4226daff28da85e9c1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150588 Malicious code in @miptaa02/erioo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54a47f69eeeaa7082edba6ec8ace847922e4690d58a384a33e9176f096e1c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166971 Malicious code in teagood-lokina10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de70a3e659d151e11692159c4a83fac2c8d96cfa50a16b888b5a9b87ba080eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fru-fada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a6b7e10cd42b04a9f59f2d469d299b3ba63308a26ac8b7cf3412cace6004b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164983 Malicious code in rival-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e3fe6d5c7becbe849008fef97b63720a25f452ef5604a1f67cab4a958bf79f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154871 Malicious code in fadila-poke136 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79bdf8b58f3f19ac31fce58316d11e56830deaac914460babd002fcc63c11d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270defcba4994b2216271f8367946838efe8d764c0c560db8c83067058134bc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...