MAL-2025-167089 Malicious code in teagood-manaki25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b78575a6678acc8e036cb5217e9b8027e0aabd796c5baffe071ac918e28edb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169252 Malicious code in trevora-cir56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9497f6d695772d831f7ec9f40b52ed7046808ac1b24808006b28847130db2214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162200 Malicious code in nokire-abimanyu82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a3bbacf91c173b269763d65f9dd13bd52286ca9cff6ff2c2613439ad9d440e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158035 Malicious code in layla-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367469bbbce07290d65898a50ed7692ad4c603e3d3df7ff0b6817a63e1ee3fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150851 Malicious code in @miptaa02/msda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd91cb98351519a06778ae6cfb651dcffe6d96c82cdda0bb4619ca0b14ba3102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163862 Malicious code in nuilava-dakaodfrae-nffamhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7bff3222893dcdc931c4987037f1b374279bbd579d462ef5a4ca40b4c7e08a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160791 Malicious code in muda-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0c02b3d00cddde0ef057810e13c8cf88fbae28ef0c47d6a4d38d6ff6fb4d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152276 Malicious code in alfiansyah-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1da38ed5d646fc4425a78549825b40bf8375fa0342a0052ec2bbe94c43a8770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166414 Malicious code in sunderlan-ud-vakumanki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf003d1a2d472f9e2bb3a80a1f3b83367816d43decf7196541b37c31e8709bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159141 Malicious code in maka-angi-gunalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e913407574d1b4879259d4f2a9d8515308dcff86ff2730263e0a371d83a94e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161636 Malicious code in nabuf-otomabin-njsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecdc2fb593a4e7c053995150d68382b9c22f55498167c316a366aac713532e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165771 Malicious code in sau-naki-iyuulaaimulap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37190f3f2fcbfa3b0cb817bbcd08a05ae5f6c87ad91de72ec5051924698f74df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150262 Malicious code in @mipta1/sura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5187ebb8018dd8c4e964433cda3b616c596dcb42b06c1d58c25fb00e05a039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168582 Malicious code in tealove-nokire7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163b0a3be2b7df48b88ef444250a38387a0e185921c7fa56af98093c8e477593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154332 Malicious code in dia-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b135a60d795b28d289dbaa7aa9784382e965bea841d7c65659d67dc281ee470a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162416 Malicious code in nokire-arhani98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b88bb40deab006e4fe530ee1928bc03de6259782ac5852f707df68a56754158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158843 Malicious code in lookingan-namalaka32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d75fbed96ab069b6702276755274a1d132a0156819f623d41c948020e0f29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151171 Malicious code in aben-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3adae7c76a82576585e8844138e6c27550bf67f4344a140f647bd1b469ede8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170557 Malicious code in wulan-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec088bf5091e555d542897205341b35fc398ae9a949a12708ad473a47fa5735d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169911 Malicious code in uinsu-losit-dauvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ddfb37989f3913773eb3a8ea87c3a8b1330cd5cfe3ba252cc910c9c51f3dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...