MAL-2025-152510 Malicious code in alvira-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6455278cdff6eff9cf0a8f0eb772762bf64bc988c3f28fc084aa1e251e40a035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158509 Malicious code in lookingan-nalako94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01182a4820dd439fc1611a9434adfc765d4e4d8479bc02db7c26821596220ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169212 Malicious code in trevora-cir2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901c2aa106f68b208e7602b4c4d8acdcc697132fb8e76dcdc1f3877f17ff8d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151216 Malicious code in abi-alfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64edcd6d3108555e7f3a670b0cbc8e1ef14107a0df963b88137ad6b0cc0a64e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151168 Malicious code in aben-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df66fd3043213adeba0e34e0256b23b46eb17daa8a42d23e4d80a00ba321b29b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167911 Malicious code in teagood-yakuna51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20dd8e2424d6491635d7c2f05beb8dc38ea6c76a2cd1a7b648a705cd5fa8d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166151 Malicious code in suharta-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7eaddf5e65053807b7f9bcabc0dc35ab65d58d9581f51ed81aa67f334153ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150953 Malicious code in @miptaa02/sssaghafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b391d94e9e3b09542ffb697cfbe594ba09f7556e9874652e80b94b96aa3792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163345 Malicious code in nokire-rara55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3322c8ec1665334e908c690f64a38e7da8b9824314595eee037b5cd7f373d1ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152034 Malicious code in air-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb2fa9164bfd4dcfb261c5cc3956a5baa98949ecd5670af13d05d9529a0e6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158098 Malicious code in lina-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6e362d18894c2a676d5895649508c7ec31a8b3b7bd0dfc887b55c5f08d2c3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168890 Malicious code in technical-alnbio-tolimasy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f915559dc754180ed3ac605f027ee455e884100c2fcf29f52ca2cf545dad8f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157716 Malicious code in kuinsu-lki-kopanunataiabumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2bb09cb95e020d9e40f396c4456292c758f330cf52e7de8e5c014e729bd012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160868 Malicious code in munidr-teddfrd-nasuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3067d5f9a4c1787264dd394097f57b7dca0d7abd61d5b043be34a109f87ee6fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165229 Malicious code in ronaldowati-cir6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36b2a119b699cfa31941f224158888706aef3ebbc2e1c771e083f992ca95efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156497 Malicious code in infi-gafob-jagoitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b3b6aa02cb61c4b69445182762e7a2605243cd5c507b0ad575f266bf7c1465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153444 Malicious code in avminh-afogofaafi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a8176fbbce93fd29309037e28d77450d63d8aefed606c17c872be03eba598b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169657 Malicious code in ucok-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d8cb4b1928f5d22ddd6b976f6aac5250c635d2737bf95ab9539f712e8773ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153867 Malicious code in bitha-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f959849a4e6a02228da8cf31644efeae0a045630af1c5d48fff413717d78cb32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169662 Malicious code in ucok-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9875f8d13fc18b432795e62022dc4ada5f62d4c4605195adbf4a176c09a679a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...