MAL-2025-165859 Malicious code in shilang-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5645ec49365109fb8271715518cb173a6b5b225902f719da5a035478662ffc51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162856 Malicious code in nokire-lokcek97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a636c83de2325dfcb1ee816026248079c9d59c2038c3b8dc87ab3f38b6da18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167973 Malicious code in teagood-yakuza17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccbe2c18dd1bc17d93d6fe3dba01f144cc94450b54f2a1ecfc6a781d01690513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150497 Malicious code in @miptaa02/ajyub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b724be50daf6b431dfc9d03a864be9708b9fb595e05d16f3ebac12516657fbf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d501bb031bd05dd77c454eebb60f32b47d26dcc217fabac43f656375ed6f5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159556 Malicious code in manaf-yuki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d5b8249276827d9956620f96cca2d7f95d5c5de7dbfb10f180a838aef055c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169972 Malicious code in uinsu-lot-bisbamayuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f374e20336eaab5b99d1ea45c19251964042dd949366211af4c8f2bd4dc6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170473 Malicious code in verify-taic-alusakiliabmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555d5de4757908083fafcd79c70283bcaf545f789c2e56c0e503a4f94a8bfd5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153771 Malicious code in bintang-tea23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929887ecc7156f4bfaf176884d643ff50a9dab3b55ac0213383faf9e533b175a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152886 Malicious code in asd-nufgttr-nutry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb6a039e3aabfbed5a52d6e84645d64686cfd1f9c2883cf61d837d99628e4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155309 Malicious code in gifa-otatu-umotari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605b021d99ee9d094601f09c6833d493e39e7493133f9cee2c592666b49a69d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155285 Malicious code in gifa-ot-uouto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfd699cbc330d1d954f2de390e47bbb94306d8051612a370373c34053aa9ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150768 Malicious code in @miptaa02/ivah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1fb6b26dbb0dcba4ad7c0a5786e44432b1fc038ef9239f9003f331bd4ed10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159124 Malicious code in mahnud-ung-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e981aae59afc721542c160f5b115b7d2b8bfeb43bc7ac2945dbc60c16e292fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158454 Malicious code in lookingan-nalako44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdfe1ff00b3ddc6e069caa6eeb5d372e9b3c788782c745c0701aa285a49949f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164255 Malicious code in piluvaika-kaialibu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7b3d326030b993d6f60975b5b2df75f3265d8756854b08b597da431cb543069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151852 Malicious code in aiboa-molipe-amuaisaiuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763cee8ad1902d72a35fe49556c622a17967c27a834c4850a161355ad50b8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156397 Malicious code in inal-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f204afefab9bbbd67e47eea007b06b57f5371cf560b1e9563b3e9bd21fb00033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164461 Malicious code in polymer-minats-buran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920bafac38e932f97b762892e0786998795c3c9645b84acd9baca2ca2afd6379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161444 Malicious code in nabuf-otigani-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3c927426244f2665c0b5f2a8b8e3a70cdaebfa4e4500fff23c30d47c053784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...