MAL-2025-170544 Malicious code in wulan-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3098204118f79880cd45ed077f9f5db7d7db7bb64a79ca05b5d4db9551939979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170521 Malicious code in verify-ticul-bisusanyaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bca663eb71b3891ef5f95a84721136352a3ecc2693d1ec5014ce60f99fe90df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157665 Malicious code in keyla-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b517a0051bce047e1a9b8620e4ccf0236665816c8b44d951ab76697c2e784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155490 Malicious code in guras-visa-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5aa32dd69c795d6d982449f65460195e181762ae82ffae60ddc02521e0e2ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159564 Malicious code in manapf-manta-nayadfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1408c2352edd5baa22755ca7ca76ff4df82775710d8268adf604cbd3208f8d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150677 Malicious code in @miptaa02/fssis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ee911311ad78c4c163c3f267315aac676ef4ba8900210879d0fb1655e4b126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159313 Malicious code in manadi-scaior-dareena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32912fc75e40e2e66c1cd5010da4a63703e7d4df2c03b411be6bdab9428cd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149963 Malicious code in @mipta1/asssesx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ea3a5d8f140497614b3ff4b207bc8db7f7fd3d155337d17cd9a951d9ca3f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154440 Malicious code in diago-klp-kauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c05d553760afd1c2461bb2d129a1d57f48b7daea5ce0bee4892d10303bb6c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151191 Malicious code in aben-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b299d70ebc002cda4da0e84f5b265c63bad0f702d16c10abfa3d50c6cd4877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156125 Malicious code in ilal-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870f5b4ca97381d0f38661fe0fef0d059cb9fcd4a9d0085404e9e0712d9cf455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155337 Malicious code in goodmanmax9250-fun-create (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8284021c76041110bd838e308b5ef4cec6b48b5ce0557fb81ba06cd3250306a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166850 Malicious code in teagood-cuekin81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35cc65789c4527801b40de9592c67a51ce5df356017c1fba0076f3367ac49fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158928 Malicious code in maalasha-nut-beli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40810988b621abddf363e520155eb491e4a25dcee8fa84f23e37581a109d2a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158924 Malicious code in ma-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4659ce9379f7c7fc415db03c8a877ecdd5b89f4dfdc289b87367bfc6c78cb1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165877 Malicious code in shilang-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3121b1030817a9e12920e28a9a40644d0f9174d0e62c5bf58c8dc878240c69d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166685 Malicious code in tadashi-tssu-tsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21035b4295fc6a40e54bb1a7e49562e1152c75ff53c7a19df2f3ce440aa4d521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161590 Malicious code in nabuf-otoiman-igiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1186b6e83ff0487da7e78327e20aedcc748328447d0c3175757efd4a15cf05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166762 Malicious code in teaadgggs-musngi-mifugsysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edff72febf388f8bd780ae990e387666d3b0c1b51828590cd267d0bb27ad438a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169653 Malicious code in ucok-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197c054cdcb0883996fb2de94a97c1e447a898a4ace5a845d9d89d678a338efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...