MAL-2025-154343 Malicious code in diago-kalop-kalosoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 697f63d42883b8117e83d4b79215fd2b197df0098178c216b9bdad280415e5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166490 Malicious code in sunderlan-uyud-vamukualaiabaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8d2416695c637ae567e5963f1d2063a0d6c9c1b57148274f1b3bf4e78f1741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160351 Malicious code in messi-tuasd-usidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8a774f388b908c0b4b8daea3f62568195fc6db104c4fe50e3e8db525b3bd00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156035 Malicious code in icha-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f42a8d648de7cad4bb212de5885b06877eef270b486da30a65f7ff1b41a5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169983 Malicious code in uinsu-lotahmi-nakilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e7edcb4b8060e0fc4696c93c9c52ecf1c9e54f53bfff77ffb7c911ca18e091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165017 Malicious code in rival-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6be2e6231b7c293614705197c8e0b847e114bdc9fa69fc4a2912999a66062cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152711 Malicious code in angin-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6871fb8964505144615d6422f003eff7e76376e2280aa213485eca152cac177f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159141 Malicious code in maka-angi-gunalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e913407574d1b4879259d4f2a9d8515308dcff86ff2730263e0a371d83a94e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162142 Malicious code in nokire-abimanyu3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf9d78239ee6365870fc66a21b1b5303de46ecbc3ed7570d5a1a519187c620e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152735 Malicious code in arif-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595eef2c5c8f3a35f87b7137436511610bfa4750e62f01c4c381dbce1298fc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156460 Malicious code in inal-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fb9fe00a1b5afa70fd61d12400c87477200843624892cf9f7c8572c4e0bfa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152490 Malicious code in alvira-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca25fd7d20d7b0ed64cb7e95edcd59f6130efb9ee0fb5c0b5b290f7c8b39523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168199 Malicious code in tealove-coki41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3faf30fe063422a7bd876384173c85492e1cd63d143be92d54bdf7f5572501b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164784 Malicious code in rinto-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9d135a0a2eb155f4737240da3a0877fe177ec32d41cda8ec5e4873ce968b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162416 Malicious code in nokire-arhani98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b88bb40deab006e4fe530ee1928bc03de6259782ac5852f707df68a56754158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164727 Malicious code in rino-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a651add57774e07d461650d3734ddd0a22b37924dd11f85cbe702603e00384fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157284 Malicious code in kamasada-ntai-ksdyasadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc64bfce0dc1675fef3fcdc40e4f67abc2e944ae691803c4f7e9fb5f45c709f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165363 Malicious code in sabua-muhayu-tadugmafaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f572d73af647e61d8074bacdf3219024134cffdd769e969c4856a9c90aa4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158226 Malicious code in lintang-tea64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b3e8761d5029807474d2ac3104e09fb08b4be65f9f89742a43bbabaf67a1f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165771 Malicious code in sau-naki-iyuulaaimulap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37190f3f2fcbfa3b0cb817bbcd08a05ae5f6c87ad91de72ec5051924698f74df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...