MAL-2025-160403 Malicious code in messi-vutsa-vutda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465cd0dd178612b2a2765bcef52d8e3cad40b31c01c3e52ed228b1a59a02e6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157900 Malicious code in kupai-lulikoniuta-igugukafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0584a050511aad4042ddc593535781a05756509673ca5489926f3f32e8eb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157839 Malicious code in kuinsu-uyillu-vilanun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9749c2b0ab9225d3fd7866332f17155c2e8237a989b6f044eda308eb0cb8313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151605 Malicious code in abuibanua-mobiman-aryta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e6380c272a5827c31478f112f5ca3cc9ebe8bca63453f87176867bdf0ee8535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152782 Malicious code in arif-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483c23e61665194ddcfb9305d85941af9797001e7d16c11e5e74945a296ef02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167935 Malicious code in teagood-yakuna73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da4d75dde7b9ca5a8b415a97988b6e2a5ca6241e600ff2166b65f01be73c0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169688 Malicious code in ucok-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2178c5b7a449ade9eaa5cfa930ef4d8f531936749e6ee03232dc89aec41b53c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166705 Malicious code in tea-osss-tepanidd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7727b4640e6373a637249889ee133e8016e080765054ad430f564492b422b08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157625 Malicious code in keyla-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a891a6e90b7ff8443a72ad9279275c1158804594ae0add8f0115b88d28459fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156359 Malicious code in inagi-vumafe-nagfufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09dc045f5ef5b51f82e47a03f9d37f6e918b538dfb25c561bcc816b6bd08915e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152823 Malicious code in aril-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791fd047016c990fd881302b28006ad56b81deaee62b9491e2a9e237e179e62a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159452 Malicious code in manadsi-sfdada-mabadva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde3787ec26ac2473b6f643016f18b474d505c5173a16f085d242000b47ec74c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166055 Malicious code in slamet-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afe60758125378f3294d59f9d5f446bf6a66d2e53dab72a3f8e7f0495f19c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154360 Malicious code in diago-kamli-luaola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee7ddf4067280813f70066a6459acb80f498614713f57be8341cf635ca63441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166512 Malicious code in syahlan-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7ee50f2c62e50a565aebe66dd3d974f4e6e894e9cc973e33a624513b91c4b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155340 Malicious code in goodmanmax9250-model-tobacco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2a33d96c44b4308c838c1f20a838f43a540f909944535cee95d3b123a86793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169223 Malicious code in trevora-cir3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bdd6c6aa977528d7278798336822ebd940adc4df13fb17cb3fb4e1f548cbd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163869 Malicious code in nuilava-dakaogfrae-nha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac4b27fcd74d857a939eda70d42aaf9bf36869e8c6b4830104ef79f2889ba57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cc552c84b3dc65faa96e2e50f0310fe961a5308224809890c3c0b43c2df6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153759 Malicious code in bintang-tea12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7100e05a51363f839b8ea14a8929f0d309de1ef5f3471109ec0cef5d1669bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...