MAL-2025-158408 Malicious code in lookingan-nakomi48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87c2f89de145b323b2b9bab36f23ec321ca59a4155a93e9926afb84d3ee5889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165700 Malicious code in salabunli-nibuia-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a2202c59e5a3c5dde2bed3cf5eb26f82955668fc23d6c37963d4579072fbeff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157973 Malicious code in lala-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ad22d6a80bba9273128fe6fc34c36a01ac1ad9eb77d3594136cf46574789a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169500 Malicious code in uaragifa-afaoti-urufuyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb51ed57ee0099fc2bdb80972d48b76c366f90d5e1b2ec9a8acb2eb651c4b7d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164664 Malicious code in rino-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8e43266ad5a7c55c18c8520c699f4fd9979bb949f4e8e1fc79c3b88fe0d8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166434 Malicious code in sunderlan-udk-vakumakuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b94744532e1e00c32ebeaa5abd417f6be85efafadf952b8c821b17443db90153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167862 Malicious code in teagood-yakuna101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a015cabb927da8262268cb32d10dae095e4951a58bcf900df1fec8ec6a02bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157708 Malicious code in kuinsnu-lkui-kagubunmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc01fa9bd82b237a5b481e22476954fb11e581323ddb35618258a4707f442eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150591 Malicious code in @miptaa02/eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020bd97a63c063caf039c40b737ace2bbbbc697be551da4e87c6bfd217b56009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164995 Malicious code in rival-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd1e3ad087421a005058a2a01b9dcc0ba17a8b711bf4b0c6a3b967ccdfd8157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158018 Malicious code in layla-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1982b618962c4350a97e122ac53bc0156e55e05246655f06c6fefff02140ef97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150379 Malicious code in @mipta19/gupusr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2f12e176a31c9808dc051dfbb50e93f704d4bf0930207677cfa064951d1881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156951 Malicious code in ita-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0316b058b15953c0a06ffb852edfaf28f8716dcdfa284762a272eaed2612e197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152406 Malicious code in alita-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b91f11122d05cfeb0f0a2145bdf5126a17b49ebea9179fa5516134717cce627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163976 Malicious code in parwo-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9281938a6e517336712d7af1e705009c67dc3664540b5623fa8599cf334f646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162492 Malicious code in nokire-asaka9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d8d5c74b5e33039bc25120376a5927ea1f92b3093180ccb645e862172e84aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157585 Malicious code in keyla-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7ff576679699f3aab3bd950ceb92ef6b63998346b1c9839833efb08d0004e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164594 Malicious code in ramadan-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89415c85fd45b2589ac5201b1b509eab1739f268f1a4e7861b3cf68db420641f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156000 Malicious code in icha-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc17afad26577670a66b700f0ff7d456051185810d9038622b6d9ae3045cff77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157884 Malicious code in kupai-lukta-joalbik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84de7eec92c601c903b5dafd39eb33333d98e32d21ad6caf6541b47b3ef7567d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...