MAL-2025-160303 Malicious code in messi-buysa-tytsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4330d813d8212678cea131a0d928a9df9cd9f15cf8c8b75ab2e1c0aba5ac0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164983 Malicious code in rival-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e3fe6d5c7becbe849008fef97b63720a25f452ef5604a1f67cab4a958bf79f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157459 Malicious code in kapvino-si-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25a8bab6a2283770f436eccd943578153d490cfcd9399642da8ff0bcd2ee12f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151547 Malicious code in abu-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fbf0c9f59f6c6a6442a3a8ae034f9adfffe2502b8be0b5adf07f751a42c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166501 Malicious code in syahlan-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49824b97094baac83bcabbf234fd46ed1581e62f695257b619c66ac8ccca8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157305 Malicious code in kamasada-nuati-vebsda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780ea94add3e8de57c56ba5f9e3f1432e30b4fc362360be857c34bce6198fdaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170036 Malicious code in uinsu-loti-nalsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f191b07a669075a07cab246a1281ce723e7c3b1c2dadcec809434d7f4668be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153029 Malicious code in aviah-afigagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d52e51c718f9ab3cf8c0e2241795cc6fffef44e6a20104ee9bb01e5edbbfa36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151362 Malicious code in abina-amogoi-anuhuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e06943940963ebb199e31de269d6d2b0eb50ba4782003937bd563667282579c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163670 Malicious code in nudalea-fofiari-aguoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcddeed7a6d3bec5e276f34b838923a95db28ea658cae378d12ee748bfe2db87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161984 Malicious code in nasrul-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4a7562f72c4d37d39a1e7b67db60ea516093d6419e88e56810f3400b211d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166038 Malicious code in slamet-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df461df2811234295296a44cce6310c778c083ee02c2cdb3e2c87052ff9cc989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166159 Malicious code in suharta-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b340e5ddd46157f3b8a799dbb2b55085d903b5ef562d48fdcd2a3e20a944022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163508 Malicious code in nokire-zabuza20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2edcd612ede454f9843c6717b527eebbd34a4e4fbacade9958176333f03829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158791 Malicious code in lookingan-namala76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcdda1d1d325c9942503b53e1d04e12e0fdbb039cf5e5ff6e665b1579ab2392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164143 Malicious code in pilka-kaliu-nubulikvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1acab3a0baacb2ddfb14170e4913647912152e5eadf17f27437ca58d727f6c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156390 Malicious code in inal-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719c46605673fc2e60e0b37fb85ff2c41297cb3fb47c46413f110ca53eae71f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150263 Malicious code in @mipta1/tadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81028ba5d18a96f4520a7caa5ef4b2f2135bcaec90020859ee6e2acf28ff59ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150942 Malicious code in @miptaa02/sdrra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144c231912e9273af7f818855c15370395ccb19217c0abe708367cddb66362f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163524 Malicious code in nokire-zabuza35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0697e5b20317b40ba0db68be975992275586e2d2c2c7f5ca06c7eb5ee3b2c222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...