MAL-2025-170165 Malicious code in upilkila-lukzli-ilazou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff65b318fe405051c9fbaf2244cd394518b5244f0c32a5834dc464cf6c3c036b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150044 Malicious code in @mipta1/hisdas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c164edc6da0adc7cc7b69bb393af1a74d907ca7fa73eb6bd000b587c9ccb03d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164837 Malicious code in rinto-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562e6555e764f9aae598c0caf3f6064f734dcd346b954c7905f7da7163b140ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158601 Malicious code in lookingan-namakiki86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3c94fb08aac6b7c61397bbfca80d28e2d040d70f8f401be2559d57b51029e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166700 Malicious code in tea-osss-tean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a9fb9f79dc13935b529b7735a778f415cef0b719f878c09a1a65717d78c9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168717 Malicious code in tealove-reborn40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f414137e3bf9b6e24700c92c51eac8d9c6f26fc8f42c4ad947b2267518d5091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuffak-angabofi-gunal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90cb01f5c83ec4228c06d734f3071c0962a257f24e2fe3018dff13e80fd5516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167408 Malicious code in teagood-nalikami133 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c091513f4b957819ad9314948eab6531e2f0316d4a21a5d64d84241561d0ae46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163563 Malicious code in nokire-zabuza70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d613a5a8a5bea8bf6b43d6240d6242273c19fd66b15246d4401a45ffbb23cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152175 Malicious code in akanabi-abila-baibubia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52454311fb2f4cbd54ab279fdd85d29952603910cad24597fba58849d5ab292f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161926 Malicious code in nasrul-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27c0ec1266ad04bf94a857123d400c30fa6aa5c2c4365c67cbe7de31da1351a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153511 Malicious code in avomainah-fragis-ogudfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d264e863f1b881eb21a13237c30ed277585278ddc7f8652bed3edd6047d02c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e11d8e983479f4d2e1502d9504e5e81f950c199df6b2859cc458dcec7e114d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162809 Malicious code in nokire-lokcek53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d72397ffd8abc67d7a556e4086be605176fee9e7ccfeb6c323f006f193bb5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155108 Malicious code in fitra-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8aa130d928372c49594759562361b3e724fe7d480394aeddcd27027099c0d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iigfj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 619d5c6b95313132e5dc68dd0b24398c2541af122c7afa744f867f6937ac021b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kununasilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb177fd07fa92ccaf0f5136a7701c9c2316f57e9256d03035d17e9cca0e02d82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160533 Malicious code in miracle-doki-unisakiaobaiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc37aef52db683ab8e2504f1ae741bc7530180b87002bd5ec8d71fb96b81f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164560 Malicious code in puteri-mint-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 482746b9914e3b864eeba0e66ddfd385d291e2616a0e86d14d4b59b5b4335fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167695 Malicious code in teagood-namakai40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0811fb78b9b6a822da7cd3e4345ad04640da8560ce6f8128e7f1d220adb39fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...