MAL-2025-151906 Malicious code in aiboa-molpie-aroioai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fc96c501b492d3131938831f9db96523ae595c2f4c770ca786c576cc402e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167197 Malicious code in teagood-nakama32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1377d8f6762143e5ed880c1391d6a908ff01f5604d0e4f4af4bb1ad38e0f6174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164685 Malicious code in rino-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd093af895f7562a2b62d704d301258d53159cf3377cb46eafef14f63d1a6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161259 Malicious code in nabila-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5320c27f8a8f07a38a26ff12cfe48f0d043308fe363542d58de6d10e4557c667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168219 Malicious code in tealove-dana14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9338b3ab86b07593a2d3441af00d49469068348088faf23a2cc6d738b3e555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153769 Malicious code in bintang-tea21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3fbe6eb3802015337084587adde601377bda62423ba69beb4f0fb100d4120c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169975 Malicious code in uinsu-lot-bismayuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a91b00c34774fbd5232caf79e3dd52f8b3f0dda33803db4ef35b76335ca0f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164255 Malicious code in piluvaika-kaialibu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7b3d326030b993d6f60975b5b2df75f3265d8756854b08b597da431cb543069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158047 Malicious code in layla-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b4fe5ccac371f204fc5dd22548c7d19daf9424438177758bf1d31d3ded89e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153553 Malicious code in avomainah-frasu-ofurau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5956f841693d9c34c80e036f076a85518123dec7d72fafbb57f4a269e6fafdb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162731 Malicious code in nokire-kore42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39dae43dc839d3bc1bb12d16f2dbf4c2f88261322dd0a67ebd3660f1a01f630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150993 Malicious code in @miptaa02/uu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0192769a43da50dab975f349ba64936ac99019f8435134960b290aa8b350afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162952 Malicious code in nokire-loklok93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390f50504cd3178a4b576b8c578690d075875e728e4177afaad8ba7ea01f99ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151552 Malicious code in abu-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e422ecdff10964345903022b698ca0309db0309ec39fa0b4ecef626cf3ac63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159410 Malicious code in manadsi-sdada-mivafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3477bc53f65d004f3956522cb39b04bb3492f4de77ffd5733b15f177a03cc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170522 Malicious code in verify-ticul-bisusnyaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b81009900d49ccd39efe9d1c012b63b952d75b93ccd4a5f8a1114ca3017f4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162007 Malicious code in nasution-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b446a45a52b81db2a8a829a9f9bcfcc2998b9358fb4617685e7d421558ab31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152933 Malicious code in astia-ala-malikafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e9ccb95c1d43b4ad70fbc498d5cc15f54351258f9b36fd53ad50481c5e95cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157880 Malicious code in kupai-lukta-igau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ebeb9d97ae07923b3ba0b8fedc6ed2ae065a10bf7960917a804870d849ff276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155680 Malicious code in hariyono-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41ecec4666cad4a8322e0ff89050730e33b18cdaf02f3ea052201833cbc47569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...