MAL-2025-160102 Malicious code in manus-tavail-maoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5629a416ea3e2f11c40fedff8dd845ba2b19ba3521c75713382248941f61e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156769 Malicious code in iomodra-fofiori-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1c154a8cdb156e08482ccf45f70f29e16636fe41a887af0087fb64da1aa6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160667 Malicious code in modirai-igno-jianamagugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cf7ad45fceb4b8f2da446cd2d61b7a346604daf075e20876c04ad53045be68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151014 Malicious code in @miptaa02/weafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76a95cee3c1281e4831d3faca74b8c2f069a776e4b28b6af4170cc5a9e74dd64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164743 Malicious code in rino-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15570af979bf2047ea4c5d58abd602d1d9ceac5ef00eb68992643fd5db9a403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169522 Malicious code in uaragifa-afati-uruuo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018762b2912e82b0b260f333968eb35e8b0d360712e548beb4ca71400cdf23ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168283 Malicious code in tealove-darknest27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80c5e32b32326a9af204153cb138e36970298e6b52466827a828c5e540c395f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169870 Malicious code in uinsu-losiat-dilakabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47b1a15bd8617911ccdaf8c432e9028d6df164f7267ba437c4e2fca523d067f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168123 Malicious code in tealove-boy18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bbc4414210d7eb7cbcb28a1f73d61db546f2534cb5fbddc5adb2957e6f02bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169616 Malicious code in uarug-mitaihai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9601a5020739fc2a20a3ffa766427b051cc71291f755b689d0b324651d73c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161778 Malicious code in namadata-munaroha-nadgamfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42884c2343922c68ec85e0af033431f4d51e533a0b28c22694c1666dba0375c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151240 Malicious code in abiba-aluvabai-ayaabauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ecca10df922c1992a12965bc85fb078265731793c5fc1140fcafd0726fbb69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152185 Malicious code in akanabi-alaah-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30dc0fc4479dd3795cea8dc062294df4f903e2d10fe5a6a83ac594bbf165b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149986 Malicious code in @mipta1/ds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75dd5894d0b0cc5e7a026d501f8bd28790fc0194e9074bd031746149b11b58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158743 Malicious code in lookingan-namala32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff044111c257efa45115a4e594f6b908c1fccd2db022569db4b28bf3c49bb3c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150261 Malicious code in @mipta1/sujua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a3f45044d33499256c0c491724be0f469d0edd15680f69bdc52e801e2176414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168923 Malicious code in technical-aloni-tolaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde2b82e27c14829ec88b5b0ff55b118f60c18a591a2fc3e35ac9148baf34a35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150173 Malicious code in @mipta1/olisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97c2e8e7885c9b1423b63627ced968592c3c4a739ea363a180b314c889fc8f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158172 Malicious code in lintang-tea15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ffa5a7db956aaf4d11ae43cce5d0b233f78a35b5f97f1382954cf6897d5229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155793 Malicious code in huda-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6ee907ccdcd908b7402b6026a6350a9728fe0cd2689624c3d91891cacd5a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...