MAL-2025-152497 Malicious code in alvira-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7c0366776dfd45367ad7d710510e7c175cbcb5ef55babddca83a6120255be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155539 Malicious code in gurs-muiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e48cdb5a3a5e8cc2c0decfeaabfb130da9d3b40b0f90bb27f8a655db433d6b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169142 Malicious code in toyota-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342a70b2ff62daef8cc4203b4b1d1bbeeab56cbbd05427d8a27f277df4ac0e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154198 Malicious code in dajouka-taaa-ta12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313c651addc151bfda04577a782d7bd6c12b205ccad29f018813c5296a3b491c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160776 Malicious code in muda-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756506581f704b03ad3c4c1040e49cd108f02097639eb7173baee683fdb73d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159146 Malicious code in maka-anima-gua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11109f61410f79c95d089303cab85aea316e0004db1654846b3465ec10177c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166572 Malicious code in syahlan-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa430682414d195cb3285363f983e26db082e14cd8ac089423a1f76a98cd9533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162019 Malicious code in nasution-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1946bc5c5b6ad976bbc7c5b4278684e4f3b2636bf99ba3653052d6e2f0483950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160935 Malicious code in munir-terd-nasuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b8a40f540a52f0b2817f90f167587e47eb21364dfbcd4a5ba4c6dc51d92621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164768 Malicious code in rinto-poke114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071c751532c498bdc45a2fa1808c85d9114b2bf368b730e2b442d0db443c8c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155938 Malicious code in ican-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b7f0c39d022c534e82100ce1c0e6d232b14f3c85e95fe820f126187f5e9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154832 Malicious code in fadila-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae01171f73179bfd523787f81850cf231ed53f0d7f5e329f96c8da247ab150a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165850 Malicious code in shilang-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca9a0e4ce022828a0a5e28fba2b89993ea113b7a44ecc93923890e931f4dfa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154963 Malicious code in fadila-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb87a8242050f54919be9d9769ab7ae4e2bf54f2c81e22b107d29ef06e16b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163713 Malicious code in nudela-aahagf-gaafodfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc135df48a2a5babe3aeeb64d8d8ef2ba614fc79bf9430f6a68f8cadbbdfdd38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160422 Malicious code in milaoa-duio-nsastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1968ab37cd5bba579758d56cda8a2a10e9ce2b95e61034f9234761b8f417f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153373 Malicious code in avminh-afais-fodahog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f011ec35954d0c30706d875e0f5eb66c1f32ae6f1bbf533494dd930444a7837a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163332 Malicious code in nokire-rara43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db11e01916cf42d465fc7979f637d4e5618ba5eb1dfded84d09cce99ed30e16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153656 Malicious code in billa-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87884553c12cff353be878899d93e9d82a22ceb1c8f0090c9519644a36df89f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165209 Malicious code in riyanto-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5b364c41e0d91cec4513f907224b39b0cdf907f2203a95b12d26a5dc831ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...