MAL-2025-151633 Malicious code in abuyilani-nikubamia-luyahambi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3edbbeb9e2d24ac1a21046e6acc94421d6c5e8f4e5a2dfd9dfa3ca97324324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155461 Malicious code in guras-ters-brunei (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf61a11963254aa3db03d65d92a6ddfead9c0936c766b29475340b1f3e9ca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163869 Malicious code in nuilava-dakaogfrae-nha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac4b27fcd74d857a939eda70d42aaf9bf36869e8c6b4830104ef79f2889ba57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165018 Malicious code in rival-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16820e333b8941ae3eb9123610e4b6c3c03c915fb73fc87492cecda16219c027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166184 Malicious code in suharta-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b654c9126a005d4de8f872edccce1a90c8bfbe590442d3523c1fb61163affa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151605 Malicious code in abuibanua-mobiman-aryta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e6380c272a5827c31478f112f5ca3cc9ebe8bca63453f87176867bdf0ee8535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157108 Malicious code in jimmy-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adcba984c2d1ce47836f9a3813ded45121348746edab382fc460f54ab13842b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164676 Malicious code in rino-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323c4203bd3f1881f6dfe5e388f9ca02ce9f1cd2b7d5a21b1ef75d6e8b314d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152361 Malicious code in alita-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f335ad573f78c77071d6558157344712ff252ab9ff436f3a05c79a3d84dae235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169186 Malicious code in trevora-cir131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6451cf979834e9ae00cb79cdf882f6f730b3431b7475ef37a18c53fc1f811f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168882 Malicious code in technical-alnbio-toli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f56bdeddb7651185fdefdc5b93a73df9f6cbb2e5560f14c8b702f1ec99fa40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153782 Malicious code in bintang-tea33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89002f739d4588d007a2ecd009807262553f90091ccd9c6a6b73d5a0a1ecd163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157937 Malicious code in lala-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdcd97278b6983b19594d7db6022cabf39141c23bd65716fdb7a010f5f9301d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150785 Malicious code in @miptaa02/kii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0959beb6f8fa6d3bf3adb719d79ece4c3d465d821de5867bc0f2ceaf4d21bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163455 Malicious code in nokire-sekiya63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e38ca0d9f1b0fded18044089200cbbd6fcc8b47854e2b06c82b30bbbb6f1873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156666 Malicious code in inufgi-gotauma-anafugz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3af69171e14789925660c5c2f0f295c60f0465bf339247f1b1d34f0cf1d26dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150000 Malicious code in @mipta1/easgr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457d0975d6ba650be8ca3010c6d189b2e55c46f5c120f8ea3fbaebf8727c6493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157590 Malicious code in keyla-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b1a2734c9c7dd9e85edfa0a8cbcab7ff402f195838bc03177b5493546e9627a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163269 Malicious code in nokire-nanali18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a886ba5ce357a847dae3e26f3fd0e051eb71058121b910aa34e692d2863ca407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159394 Malicious code in manadsi-scadador-nasisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1e11b4669051561710866c40bc3a9c9f85115940d51df5f985ea6ce5d73ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...