MAL-2025-155265 Malicious code in flight-dangw-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77ed3f65b1529d9b70920b67f5f3a1f70e724c31c3bc9d999ab6ef64b2e2b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167465 Malicious code in teagood-nalikami63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681d5dcc3c619cd70003905310f3dd05164d36b64604990899b0925f1dec9dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155189 Malicious code in fitrok-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ba91fe27c369dfefa476fc8a218de36edafd382044c5317ffc854519c2754e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154094 Malicious code in cinta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bcd636a261d212129275a49dd602623d45fbb31d2ba96313b1b23015e6234b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150183 Malicious code in @mipta1/qwasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a66228a7767474aa8c05cc2b9f7d73950a1f7ef381c24a69e5dd5998464108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160398 Malicious code in messi-urt-efus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed7967d3c5f78c54a46d4878cee3a6c7b1e733b07747649bbd68c0c3407d4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160613 Malicious code in modirai-fuhopia-jabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ddbf6c92545ad216b6e7cf3f73243747cd4e10d1df7651b51c248d907bd7ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehaah-codfd-barasew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77aca6f24a30286d559c19a8a1279feb05dc5404dac2c66f178f245797e6270a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158987 Malicious code in madan-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d86d1424f01d04841efdc5ffe6bb3f2e926d7b397725fd9ec4f4511957b49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152202 Malicious code in akanabsi-abila-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdcb01a36abcf8ccaffc7ba6d437db84000cad1d288ac661436375e4e075a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150182 Malicious code in @mipta1/qwas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437295ec77d5514f7bf41ee2d4a1df160a7cf1babcf90e9e0106d12ec1bab36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153789 Malicious code in bintang-tea4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b59eba378baca6c9929fde84f0cf7adf24aba824916e507b74c0a6c9246e341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165859 Malicious code in shilang-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5645ec49365109fb8271715518cb173a6b5b225902f719da5a035478662ffc51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164646 Malicious code in rino-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3ad516553f1ea5f6a4394745167878daa89713780cc7e72411daa4ac520365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164900 Malicious code in rita-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aded1f8cc9f8ad1b0ad29168e6cfe21a1218f02f8710705d67dbff97ac94c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151684 Malicious code in acagiyuyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61060e32a613a39a1c293829b8ec124e291c49994cceed8f038965660e889240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbefa41b621ba38105dd755eae78a5952c2b96ba59b10f6e8b5ab92c2a797c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158907 Malicious code in lookingan-namalaka90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89caceaba6e3a8cdb88be9c4ec46552f0b6a5fb22701de076e074a226bc55b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3765a44482cd50ae2101f98f3c2e7083faa151ab8f40ab3e8f69d33041f193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153322 Malicious code in avminh-afagis-ifadfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a4237b7ccf15c98463719e3f7653db3739eb9c3b471ffd497940ebbdaa6ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...