MAL-2025-159819 Malicious code in mansila-tiafala-magololasaklani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6e86d4fd208e76e5e10e48729413b9fecbd22641230c43cd21d916b55588eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162877 Malicious code in nokire-loklok25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ea410f1e35b9b184d0a1e54c21d89c076c3016c5d673b22e47581b46e5b253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169878 Malicious code in uinsu-losiat-disaivu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40de1f6b3dee3a3610feb855f333f6aa958ba43dc0d9d9a60cd4bf68f0f1e332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158150 Malicious code in lina-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1abf74803326fedb4c1484554d9cbe73e4ad01525bad4ed3abfb00270b1516c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156275 Malicious code in ilop-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074d0952fa925219ce3374fc5a686b3b8f2d8f1077a09158190e7b96f5210c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158404 Malicious code in lookingan-nakomi44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360f9b9a842e6c9ca6d3e7130e8b8f698d2b0a35fba8b8908c57b9435d8fe99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162435 Malicious code in nokire-arjuna24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9b4a6e3f86acc20e09e303ff5e11f1bc2a4de58b4607625e38719b0db50208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152185 Malicious code in akanabi-alaah-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30dc0fc4479dd3795cea8dc062294df4f903e2d10fe5a6a83ac594bbf165b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155771 Malicious code in hariyono-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687d71ae38aaec32ebd6382595d9b950b260cfeb94e293e9627f9651f066c819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154460 Malicious code in diago-kuli-luvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e73d01905e58f3c27470c958ba5402332591ae485bf4fd6ca80992cf432e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165350 Malicious code in sabua-muhay-tadum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1528c2c2b290651dbdf5ae69c45589533cee88bde8e86d890a7771f04d5652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166101 Malicious code in slamet-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7497b7b4731adf26ab8d4297fdf4727fa5e9b73808ea3319fb904d609f9069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3595b082d2f5f1a3e02cb67e18fcc4994dbbb8290e73adc4281786d07d3ec769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a6b7535e78002ba2b791033ff294dd6d120d115d7a36ce7a2b40603d3c489c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carvahal-nutsr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd596fd3da9d27f02b293db67b4253631eafdeb8edd106bc8b0b42fdfcc2d8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503486347f606f86ed470cb398bd754df2714fbf2011cc7bc9167cfca61c3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ewihj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fac598f0a51f93e5a2fc731d1c65f3208e8bd55c2a2834c68ca2441b7ff8765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20bc84703c8023a6a14b802a969749335cdf6cf7defbff1346f5422d0a4cbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igafo-jagaigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817621ce0dc55ce92fe3840371140206865ac5f0d6ccae95683db725b8efc9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe139cf17c1b54defe2cc22b0de9f57b9dc981480ff1d5d612d15b23a4f2b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...