MAL-2025-154112 Malicious code in cinta-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512bac0ca01f1d052dd95965f36348cb9d06ccac2a343b2f9dd7642940d1383c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167043 Malicious code in teagood-lokina75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8051a2e18a102b0ae2d3f3576d362e9fb1fb40e8e9788bdc993db24d4ce63a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159358 Malicious code in manadi-scisor-darimana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f34512c17d7a009fb96da02fe44a682265467ab6750a2cb6100d6d17d3ace94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150730 Malicious code in @miptaa02/ijdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05804c1584a5f35ae0b8d77448630fb555771ea8135f312fd42332d85faf83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160223 Malicious code in matane-cookik-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f58dafafe3267fa12460e78c23e2d24d738c3373310f9e904a4b37f8696ea2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155988 Malicious code in icha-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60dca588dd7ed7f9100c25fc2b54990b58818fb729e58dc66730b116cc4cfec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165852 Malicious code in shilang-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f14b2ca4ce2e266a9d6210dcc9442f49566b286825c901c75d878b4282ded42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155940 Malicious code in ican-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f50f71deaccd35ddad49c4208e922a4e80189956a03b09ccdd0bf2171de274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170094 Malicious code in upa-lubalauvalio-ilualsgdfsdfsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e75f1a91d1cc1c9ffb941f3c458c9798808158b9d8b156f1e981bf2675c86c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153984 Malicious code in butarsui-mutfru-mutyoaoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bd7d73f230d7a6b2974a1607b5c13f61d741dfdb6df51936446db0db5efedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160423 Malicious code in milaoa-mui-nastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95500b0d12cd3590d3072de5df5036aa8a0512ebf37c245059cdd73f9f1b7726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161980 Malicious code in nasrul-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533771c0ab1d4652bdfd2c4dd1df88ca107bb75db54556ac570b0a02a914a349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159540 Malicious code in manaf-masaya-nutsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9476d9559665fe8e58fbb6c7fec73adb1d85300a480e2aec88e3dbbd88fc31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156620 Malicious code in inufgi-gobagili-janiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0601214f55fe060568a93383faf99f554ca04c5544184997a15039ff02a61d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168116 Malicious code in tealove-boy11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80fa2c450236ffaeeff264fe795be4f679b02daaaabbb98221deb345ad21379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ot-uofiapfuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86dcb33b0ed331678ba43fcff0ff4293b16db33b62620ee9216250a05a61a39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168280 Malicious code in tealove-darknest24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20d1d6dd78fa952dab812dac1dfcc9feee19a2e675d2c86f691cce02ef0ea51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nibli-luyipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3f4c986ceadd686ca4e4e28702bbf7e398d61c57f46a747c8a66ee7e623505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a31a97d2e39472c0d06842c04d666b93df20bb44eb6ea2cfcf1a0f3dbc69c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carvahal-nutr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538e991000b95b12f8f89f169929dd366e77a3d2e703cefb67ec5c616f92ba5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...