MAL-2025-160388 Malicious code in messi-urfait-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6416f099947270d1a54611600cdfb389556cdee7ade4fc5ad70ca78630aec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164754 Malicious code in rinto-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b0590d8824d24db9403724eaf47361fc83483bc4ba7ab0b34e0a55668a487b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167552 Malicious code in teagood-nalikoli141 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0546982f90a30825c438e40ae904e2bc7002aec56375f6237fbddd513cdd6c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157952 Malicious code in lala-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6670a4f4756894ec5f7c2e3fcff041ca1a8d09637372a703fe97061ca2469712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160613 Malicious code in modirai-fuhopia-jabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ddbf6c92545ad216b6e7cf3f73243747cd4e10d1df7651b51c248d907bd7ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169884 Malicious code in uinsu-losiat-dukilaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9123cad7eb134ba9e91879d5bc150fea874265333ab8e0697ccb37a4975bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153372 Malicious code in avminh-afais-fodafhog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bca27f5916e003087502fbacd05b4ea23177cf10876c5352578ee3f8f0ff4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152870 Malicious code in aril-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2147c6be0e3285f07cdd019df166d7b17341b3f4aa4af07782901aad8985e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168320 Malicious code in tealove-lady15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c41c3e1cf5960f622afea39e69d5b7661d0c4eab76a08bfd3245fa6e5da50aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170495 Malicious code in verify-tayic-alusakilibamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47115b8c2c694bf752797bea9e128e253efb06574dd88cacf143ceb60b67b99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152546 Malicious code in alvito-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0072c638a4dd3d63be726b44e6756d70900f4e82d028ee7ad0988374128eebd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160192 Malicious code in masioaluan-ofa-batovuila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d808f5321788f2a93bd95f6c904cbf70da636b7a070a2d81baa788ec6ca8d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159732 Malicious code in mansia-tavil-madolio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11e76094c49f09d0b1233f3ab023c8d44d2268772ce7fc1b55e4e8dbffe7664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151800 Malicious code in aiboa-miolipe-agatamuua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b6ba077367e9507321b9d8dc991381f8e3c4c070fe78e49884fdafd0979b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150860 Malicious code in @miptaa02/nira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3bdebf31eb5abc2ffc2831e4263b8f4bbe11d6ea81a5ade691a6fe10592859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161890 Malicious code in nasrul-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f2923d0a60833ec4eaa4704329d3bef8676e8f2b18847f3fd287f10d5950e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168223 Malicious code in tealove-dana18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6e9b70c3eb8f6fd66ccc768eb51a8ca3d9875ed4621dce3815d8f92a21d9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159617 Malicious code in manda-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642de07dac424184be3333b4eb486fff6b8e3cb3e1cffa9af839ac710e0ab217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156529 Malicious code in intan-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf73f43860555012c3c7bfbfabe7db726f4a4145291c446a5345071d8342aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157106 Malicious code in jimmy-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b4474d4d8455c75db3cff68a6a4b0987678b188bbc2142456bf675b04c497b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...