MAL-2025-166139 Malicious code in suharta-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7477c37b10e739a43b8e254e7a4df86f6f94697b57d604406b25de0c317a3fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156050 Malicious code in icha-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc32ce2aefd00701c1761bbc44b2a1716339c7b8b869da9f977c0d7000c10ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159806 Malicious code in mansila-thfla-magahboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4449acd7d3a57e2450bab6a91f4e52bb6335a89d97485d6c484553cf4eeced8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168468 Malicious code in tealove-nanami39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 370c5a305782a072e712a82397368d0d8d70d121c7ec8e8015cd7d1d8fb82516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165747 Malicious code in samehadsaku-qeupss-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2712a82241e1a822031999c31c7f69b01cc5075030ac296804b15c2a98048bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165786 Malicious code in sau-nakiio-ups012uiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7ddd2a6d53810437494e3b0f25f753d49ec3c6fe58032895992ea891109456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166880 Malicious code in teagood-lokika18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7a4d82214c9df82f6f18bd323d648700c2a9e971affb395c76acc4bbe592f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154651 Malicious code in digo-kamoi-ailasaloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519d32dbdf7c153a8b2fe001ee366672f8ee476ed07fb612a417984fdde04660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155377 Malicious code in guras-asia-th (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39c55ebd0a31abef33564b2885a89c4f5bc78bc37d71e0a5ff4808f25e7fd12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159081 Malicious code in mahnud-nofit-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7cb915fe40ad54261c718cef7134b327367d20c91fced60b4cafb87ee93ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154934 Malicious code in fadila-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb242031d67b7382d47daebc158eb4da99ccd2cff28ae889d81389cc68b6b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161553 Malicious code in nabuf-otmbin-nuyaagfgidistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6755f582567f75beb7b827f3fcbdd140d1395ef49633efda5356746fc07625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162046 Malicious code in naut-tyutu-sdaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04aac7ce3438838f99b75b3e10e7e8c21cac07ef44e891feef32d58a90543a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150461 Malicious code in @mipta19/wbzoslv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9773f5d3d08cda76417cd00c72d39602b06d586625378491919ebba555ae3ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169902 Malicious code in uinsu-losit-bisavuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da4be722d5238634bfa7d2eb0d293cc1fb69a873e693552961a54b6f177750d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157863 Malicious code in kupa-lubizfzlio-igugfsddsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfd68a7c5c9b1ae52b8a62b0a9f785e86173b97244ad682601399c52985b330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152376 Malicious code in alita-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d8cb415430db290e64da4f9adbac0436841ede314f7e208e51b1921fe99330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161291 Malicious code in nabila-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42504cabe925b2f85e0eda06e89a03349bcc3edd0c318b21d8f03ba55e38502a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162692 Malicious code in nokire-kilua97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b5d859c2bc8408144250a059f60c643fe853a39ec4586363c292c035a4be78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158789 Malicious code in lookingan-namala74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd665c1bab413411f0c9a00c1eb3b83fefd47f46463cad8dc55a27740e0cc223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...