MAL-2025-152455 Malicious code in alvira-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd77fdb2aaeac05ede70bcb749e3a3d76961739bfc53fc016e3a253ad1f6c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154712 Malicious code in dioalgo-kilp-aki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb030f14a4db891035c683a5d72442b66efc9b0771f76e34daf35f88ba28f921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154123 Malicious code in cinta-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bad0cdc649769345341178fa6ed94c39b4b695946d31abc4b65b2149555be4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167099 Malicious code in teagood-manaki34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d729bc9dbaa0c913fd247d775686fd686f8a23327abba1540dfce6b170f3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170567 Malicious code in wulan-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1828c7deb7052b462d40f215c37986337b092da617d2d27202fac87b5362f90a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165570 Malicious code in sabuvauakli-nalaui-lunbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7739ad14315d6ee6037fb37c0057fc02e1cabe24aa8063d06ef55990129df67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163608 Malicious code in nokire-zenitsu21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63faae6b84c62915fc8f221b92a5d3ac950474f4022a160a5dc4c828b088f66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168547 Malicious code in tealove-nokire2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c5a4ba6c31804c833b05669def65318535a8fd6c8da09296957d91fcb0d0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151735 Malicious code in aciyua-idugaat-dau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d783a28b213c4f57c97274f5b399e82ce5d9175babe5d4da4f5842b7da5081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150659 Malicious code in @miptaa02/fjgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b23cb3ecaa5afbbce6cf47869bebaba495a8591cf01b6c51f24e1ec7348edc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162042 Malicious code in nasution-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265aef0d2210cfe133839dc4d933ea59c087d3f5cd76d7b1e712a30405b38b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164073 Malicious code in parwo-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feffde46e46d2574b68fcb51d57ababff26824bf82634ab664a14b2ad6fd32a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157083 Malicious code in jimmy-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1380ee5bd0b2552dfb5c18fef72b5b0ad0224387448c195d12ba6eb1f2fa20e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165888 Malicious code in shilang-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd94d2a86c197a40bdd4d6ec4e4333985d5974d467863747b479ad93a8a99fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152563 Malicious code in alvito-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4402fc920da45dca32a37c3d2a8c02cb8390fd18cd02c765b1760b932971b6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154383 Malicious code in diago-kamoi-liumakuakoimho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dccf03eac50e2541342e9b40d60c87fd593ec2dbfb729504793637991448b2a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153661 Malicious code in billa-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952247f5fa296dfbb64858d5681bf03ad7796de4e533546c032cf4afa6b97c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163313 Malicious code in nokire-rara26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e479480c095a06caa0c36d63b9ddc5f42b1665d16fa00474736ac96721464ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168883 Malicious code in technical-alnbio-toliaanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8967c9d03f3781890e9f8ba5b6752c00af44df9c0d33a363c69f41118595be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166051 Malicious code in slamet-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd530283b53c3b2b9281bf054fe3c16f583153d97adb73533c024b54bdf9284d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...