MAL-2025-168274 Malicious code in tealove-darknest19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d2c17d227da8065b23b95224721b1a67cb90c40c0ce1f94f0a08da3b849a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168981 Malicious code in tehah-mandarin-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12cbf8393f4562f577dcb6dd4bdd7c7980915c1c539805c20b42d0f26ada257a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151730 Malicious code in aciyua-idugaat-dafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8ea4044bcffd4d44116f30e4b8302e80ce589084e68084c14c0dd1d9a300ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150313 Malicious code in @mipta1/yaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09866bdfa45e78a9c24137e4f1b5e6b9f19886621df8e960d735881b5d79fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164818 Malicious code in rinto-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42430fb5bcb9297b28c940be76d2040cc87294ae73e8c5276f808ce471683c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153075 Malicious code in avminah-fagiaas-fimokafiganugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae1e2e4045470840041015abda9fd61b357938149478c6688d8324e2e547f39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155874 Malicious code in ican-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d891f670a1eda926665856cbbb7477f49cb5f700ee07944d803711f1e4d3b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166206 Malicious code in suharta-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de047d962b5696e26bb066868c9fe8b0577849ff88efa3bffb72fc6f90d51afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158082 Malicious code in layla-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162b5c7d9a710cfefcf22390ae00c5aab72a8935bc536314daddcc136484f83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165655 Malicious code in saku-aiu-unianusiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8c5c15fc15f3ef23ce709ebe17fd1babfdd9047365b95dbbce78a763df67cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155265 Malicious code in flight-dangw-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77ed3f65b1529d9b70920b67f5f3a1f70e724c31c3bc9d999ab6ef64b2e2b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169228 Malicious code in trevora-cir34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63dd39901709edfea0b4786328740c8023ada1f806cce68c012b015017ecbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170558 Malicious code in wulan-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ba5ac24ca8232a8d61df2398167d0ada3ec961a2e1841f3a8964a5bb92f6653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164827 Malicious code in rinto-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0679f47df9f744c8456f8fd7f1706749b5a53c10d70fdbe714ce0532ece28710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150183 Malicious code in @mipta1/qwasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a66228a7767474aa8c05cc2b9f7d73950a1f7ef381c24a69e5dd5998464108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169176 Malicious code in trevora-cir122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b9f4a6258db43f66400fb79549d3e048c6e9a840956a6807053b77b8e912c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162415 Malicious code in nokire-arhani97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae66002926c08e06961dc96e876f9e7d3efacf687b448b215ec3db0676c7d368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153537 Malicious code in avomainah-fras-ofafuaffau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7468da7ed26c82a1e1f918bd2b96f37e94aee2aa0f663cf4cd7e8955ecdcc775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164996 Malicious code in rival-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b089765145552e271c9afb51aa247679919740f304d972393e029bd3ce8cb96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150071 Malicious code in @mipta1/iugkjlk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0e3ebc2f5218165e1097b8a380afc35be9c40c4ad7735b7852c2a2fb1802a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...