MAL-2025-154521 Malicious code in diago-kulpo-lkasmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed25265a90f5c5406492cb3aa14df0197dddf33c46c7bcbd61fecfdf06ffe3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165846 Malicious code in shilang-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb85466fcb15757c3797c52adf9ba57bd8a3ac968d432091fc8108cf7b1749c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166654 Malicious code in syahmuda-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a709835044b936373d744513d83d964dde14a3b08eb23e0c26ab5a92eeb39b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155364 Malicious code in guras-asia-ba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5294e2dc00136de019b5cf2715baec3828307c4d8dc114c3070df97a2bce188a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159556 Malicious code in manaf-yuki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d5b8249276827d9956620f96cca2d7f95d5c5de7dbfb10f180a838aef055c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154686 Malicious code in dioago-kamoi-alalianoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336812a27247dd90b70ae4e6d0f36c6575bab137e0e4677c7bae0507420021ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156713 Malicious code in inufgi-gotumafa-anmfozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8049813a94f12c1c10b83f4e4531349a69963a36cfbcd0bbb1741673a90d2a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163789 Malicious code in nudela-ofgaf-gaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9c82c6ac670ac8545f78e1599bdb75e847930e8a5ecd64f692a0d4baed139c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155254 Malicious code in flight-danger-fan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f414f121a3999e29dccde778c879db57bad7c9f22d2eeca6d38ca8199f4b7734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158936 Malicious code in maalasha-nut-posisio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e0adb48639946bda92df99e5a786d4aa088516300ff643c9db9c19c9ba1377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151926 Malicious code in aibona-moilpe-aromagiamno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108c4d96f5d1572838835b9effcf6e725c56df0828978514bd108b33ab82f434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169469 Malicious code in uafaru-tumat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77aa2ebb11e72528dba5cf8ebe4690d98136dc38be65128b1711c8700ec2a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163501 Malicious code in nokire-zabuza14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662966eda0551b2a9de4ea89258c736495aa34127f36d3a3fd457fcca4a1e886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163621 Malicious code in nokire-zenitsu33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71813e67d62436f52b38e925b4ded39373164bae0576ebe25118740394d43b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166803 Malicious code in teagood-cuekin38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424e5aef9923c6cf32f9b00d7ae0d29a5f6bb6a8fb1bf3ce7612b4dc50ee78ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164647 Malicious code in rino-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e936d6c76641f19277ffdef57832d1f80c7788995fa5545aa8d925867307117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160001 Malicious code in manuk-naai-agamiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e68f7ed52093f24448664de8fb49e195df6c3caba2c763e8ab132ea431a814c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155973 Malicious code in ican-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7223338a92a5c254a59d493628a9fd2cb23e516af436e273dcec7ce33d76017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150676 Malicious code in @miptaa02/fssak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e848550a9aeb0453e27ac556d19a1976be1b126a4ec76dc710e5f7ca80ac30be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166436 Malicious code in sunderlan-udk-vakumnaakuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015ad0fc4724d26ac83e32e99ad863986fb178e461a0032d6c2f6d2182d7ceb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...