MAL-2025-152497 Malicious code in alvira-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7c0366776dfd45367ad7d710510e7c175cbcb5ef55babddca83a6120255be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162908 Malicious code in nokire-loklok53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424f6f3213b272d9375d86f13347bcd2c9394c7bd6425058c513e284bcd54826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169857 Malicious code in uinsu-lista-atumunima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50680dafcbc60b856eb634497b8efcf8088a3fdddc89ea2d279065ef5ccfd75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164760 Malicious code in rinto-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e89a5f3483fc7791d933594c516e77a1e6fce3094b02ad7b2aa069883a7dcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155161 Malicious code in fitra-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aacf799cc919fd249bfc43b9ecdf0520a99e5b408ef1da30b6da90d78d4abea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168069 Malicious code in tealove-aruma15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1e0a02f2dcf311ff592b1bbdde3c2e8769ad944c33a07dc96c3e663f60b7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162483 Malicious code in nokire-asaka14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a224cf9138bea94ea53cc86bedcdb7b4b281ce05e140bccc006f74398e207a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156810 Malicious code in iomodra-fuoa-jafuua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1b840d854cef0e33c233b6fa06fbabe657fd7ff52d7b2517efc6453469bef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162656 Malicious code in nokire-kilua64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6738587f0a97156be8cad98e461e70147caf89e4c030a31e70f17337c7149e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161262 Malicious code in nabila-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fbda564f96101ae28dcec132a3640c1524cb848206e7c91922eda2db807d0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168765 Malicious code in tealoveness38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152313de9cc4922b737c1957c982f69d94647222dcaef51128b791e9572be12f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164004 Malicious code in parwo-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a6db169474ebd98f27e29c9be70dae713d668ca774e800a5b7c81a07d14ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168521 Malicious code in tealove-nice41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89452e5344d28dad3e23c813f0934f9f2d5c05349e42d4b4c11ab3f0de27bdad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153307 Malicious code in avminh-afagi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e85b4966d7c3047f8fc601b8e897e2be0add842cffad1f943ae94e4279ba800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166011 Malicious code in slamet-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f35d3e8b148f3aefaf8cf3c957d410550ced8e1f8e0ed069720f3ccd2ff4a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150719 Malicious code in @miptaa02/icdgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5c062467e809e18788002d26e2b0dd12d053f8a8609bf1bea2690fccf0c48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154801 Malicious code in ewa-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d252c408b6ae1eb9e384947efc46c851509053f6683e2817db6b391b6bb2cc43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27875b75c1fc91744752e50c1db0e22971a946aca6382664294537f726e1debd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaasya-dgds-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969c958c342079f989e9df08cafb4212025ff4b1b18ebfb269b169d260a676f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2493d44d40022d63985f7ebb53b16b8093fca68719adde59aa5bdba3ba2b4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...