MAL-2025-158438 Malicious code in lookingan-nalako3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2912b0ac09f2f361c2e3c574cd052fe9ec86103fb9d39f3268ca2bf4a71992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156722 Malicious code in inufi-gfobai-jagiafugair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4c92ad83ae31d6fbcbebd1792e2910a75dd3a31632473e8f7a8a69d7756a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169369 Malicious code in tusaaya-0-wesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f778cd48b870b32b99bf9511faccab77b1a825799b15377e6c84ec7033ab4a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169579 Malicious code in uarfug-mitauhi-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9361397ba1176f3a9008451517bbac6ad3c8fd39369d3341ce46c4a7012037ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159556 Malicious code in manaf-yuki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d5b8249276827d9956620f96cca2d7f95d5c5de7dbfb10f180a838aef055c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162264 Malicious code in nokire-akaza50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a411c3754dce266092a2825703fdc87b7664c9bdfbc2ede6fe7408a1b1485c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164743 Malicious code in rino-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15570af979bf2047ea4c5d58abd602d1d9ceac5ef00eb68992643fd5db9a403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158987 Malicious code in madan-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d86d1424f01d04841efdc5ffe6bb3f2e926d7b397725fd9ec4f4511957b49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156548 Malicious code in intan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6be42f4cf9a8717e338246cd6d01c2d47e041316a1ae7288d798bf8ed1d534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150691 Malicious code in @miptaa02/gfud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297623e8e05c32953bdf684bfc70eeab1c725b5452f8ffb4eef613837178882c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150182 Malicious code in @mipta1/qwas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437295ec77d5514f7bf41ee2d4a1df160a7cf1babcf90e9e0106d12ec1bab36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162067 Malicious code in nitaaus-s2-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3007ce29a24a023413629665731097fee68e9efbcbdd5fa89da71ba867bd2fb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152248 Malicious code in alfiansyah-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed92eb3508ab6a093e642e4cb8a0f6de85ad8ec9c215745dbfeacc16f6ccfec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159902 Malicious code in mansioda-noda-mufngu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25af94d03f91c60dd510c099cce6300e6f3dc0aac9c11b05961a23f3eb46e322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166476 Malicious code in sunderlan-uyud-vamknaiunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9796edb3e39af1aad516a7b855c32e9d4110fa6ec9b4bf7427cc103e69a8d33e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161137 Malicious code in mutdaufs-nabut-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c398eb35ccc114cb4001e25e7618749affb70a81aa451ff45da84c22eb5b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169543 Malicious code in uaragifa-mar-sa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 931bab0227f31ea7587f5c8dd773fea4c98436e4af5c9fc5219b54cca0712879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161909 Malicious code in nasrul-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6660721ee2a9bec71361fc155f69422320a8c1dc2cd690ff7dbd127d385e5bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155534 Malicious code in gurs-mipta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6fbec7b60136a8d1f30303243bde415f74cfdc86638f4f7de4394628de1759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159428 Malicious code in manadsi-sfaddia-maraida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1919f73624e6c385975356c53b20b1fe426a44239491ae82c5b2b95a22fc4f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...