MAL-2025-156044 Malicious code in icha-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2617b3a94f4efd2ab42771292d34e8ec68171c31473d5205f2f3554c80c9ff71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153266 Malicious code in avminasah-agfimfagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c744f1e04add1da161c1d6a9d027aa794511610b4edecbae231c007e51ed67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154812 Malicious code in ewa-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ab74cb33678fd7c193813b112c68ea5812bded85ea1a07e9d325bfa4afc3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152759 Malicious code in arif-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368e81425b2b748f1f7c80b24e26f7011313c9352654afc68c967b969b726239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164449 Malicious code in polymer-indtffsi-addutfdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210d098e52363c8ed7495003de4048011b37e59f13a8b86ece48eedc16e6dbc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154096 Malicious code in cinta-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4344a0258a7bcb4dece17311152b5d214fe2aeb5d7ebe3ea997f7bd77d661984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155339 Malicious code in goodmanmax9250-leader-circus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d474d3e2631ac710c373dddd243be7a5fc1d730dbe455607acf0f8618fabca4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155788 Malicious code in huda-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b105ea58b369139c07d139373484c56a591ebf075191dedc073c9145845584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166170 Malicious code in suharta-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c9d5c161f7522c8bb2140b62a6c7d0b891cfd53d605b6a5563737171ad22de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157367 Malicious code in kamasada-nutsai-asaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729f18d78cef3d5c49d6ddcaa27cfebd9a0a2126a4a67bf203cad4499668d261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167838 Malicious code in teagood-sukuna80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95af866287ac2cf9ccf2254003cb1119d674ee42ae79c8134c65326669ead4c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167548 Malicious code in teagood-nalikoli138 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441ed56b19e71f2a9e0bd5eba93be9a663c511bee9023b545e97f7cc8c1132f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150983 Malicious code in @miptaa02/ton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a854e906616d03a47cf52173406175addc9585c888a6b591480685bfbdcdc47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161503 Malicious code in nabuf-otin-agogas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d793d96b9e2d4f9cb1ebb19eaab640787416232499e2021e418a984f8dfaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162595 Malicious code in nokire-kilua10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d402bb93a4eb5dbe5dc309adce32459d3901a4d5561411f14928d850184d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150189 Malicious code in @mipta1/resaadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b5d5ae0a87d5745759d20eab3132c06e2a7d237b5efbbda50e283bb8842da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164704 Malicious code in rino-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d501bb031bd05dd77c454eebb60f32b47d26dcc217fabac43f656375ed6f5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163483 Malicious code in nokire-sekiya89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db943832786d157df99fd911dc67def16134a863b2d571aa42b643dbf6601b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168879 Malicious code in technical-aln-tuunal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d6f59ff214f1f60bb3182cca209f8b6f470afc62d729aeed94594434d7d63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168155 Malicious code in tealove-boy47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f8928638d501cee98d39c85967a74faee421464617ae3486597d32bb7dce7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...