MAL-2025-156971 Malicious code in ita-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd9bd195a2b7675d8027e54c1d41bf50419b7ce081643d57cf1056d9fa2e707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150212 Malicious code in @mipta1/sasswsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b65d8862840056829beee1795bde239d8c7ff1c1dc0b0021429587301d3b624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157968 Malicious code in lala-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b48b7e0846ebeea8222d715cf0ae37b239ee5f75459159729d7c6ee60495486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152385 Malicious code in alita-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435ad6cc082b751c5fb308b52b8394457018a47a3ac55d72999168ac5d088a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166726 Malicious code in teaa-reborn3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32672c055e26f78f68d3852e81636d1fd856f557727801718dee0d52035e55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169328 Malicious code in trevora-misa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4e32b1e51cf61c2c896f5fc2849cc9710eab071e92ee87dc745b1656cc8442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159644 Malicious code in manda-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab239ebd7a81477b0f4fab871deaf37e558da8dae009db1723fa4d227673028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149992 Malicious code in @mipta1/dsfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4381b9baae064d94cefbcee82f0a469e8c503eaf8e717de324def090f0fadb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160765 Malicious code in muda-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901fd55ef6f15cafc92563f91fb7d12e01fb91b313688e89fb3613cc81ad3f0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167864 Malicious code in teagood-yakuna103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c29d75bfe4d8307e80c2349bb9068d3906fef2c370df255a30cb5e125f5568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170276 Malicious code in verify-aikun-miaiaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ee4159d333d7eb7efe8c4d889d14e4cd25364ddfbf1245f09ebaba6761eb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153917 Malicious code in bufani-muyau-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e7463eab4f4da74990a9fa849ed3787fd7ef5b4b72a8050cf853c1c999ad72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160842 Malicious code in muklis-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f564df8697b486d16a490c614c55f1b1e1c81fe5bcbd84473df7e6dfedd4b93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158573 Malicious code in lookingan-namakiki60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa40e422f4f71e0e998e72d1a8985f42b9e6ba5304a35fe39bdf05898be5054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154101 Malicious code in cinta-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dbb846799b5179c558dfbcc9188aefcfc4181fd55d7780caf8903601d53d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alabokio-moajikaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd10e1f2129512df51a108030ad1696dc4f1ca746b8ce38df8edb15367fd522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vamukuaaiabaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0a56839a084873012b870f267ea643e39f58af630f8623019293fd6729e8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165406 Malicious code in sabua-muuyfaafu-dafumfufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43df556eedf330bb0c4d05ab2bc74c7343eee4e051879d567b3c71c6149a8e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161878 Malicious code in nasrul-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d89b5d17fa82b0bf9067ed5623f836221be72fae7f3c1b040b740c273ac252b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170298 Malicious code in verify-ain-misuau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a50d62af82f27ba37e2913a246a61297ab40f1de7646648f201f96f80e6c746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...