MAL-2025-159344 Malicious code in manadi-scior-nsuiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822fa5009810d7c2bffa47063937e297a4ac1a1fe8de0d1c75b1249a91a8f3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156019 Malicious code in icha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb09fb9286901ff7e40445ed548cf13d84f9833430ac5d061d8823766aff9031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168935 Malicious code in tehaah-codfd-muta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7d6eb19367e84f0cf3096a0169ae118e7fd7f38a95811d07b1583507802f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151638 Malicious code in abuylbani-nikuamia-luahuubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a39bf2dd951f9e46fe57d1f04775c833c6de417dfc7e5115eeb1237128eb3cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167329 Malicious code in teagood-nakamala62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b8791d3f2e54887d38df031a4dfafdc8dc118970e4464c5c2640020103510e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151546 Malicious code in abu-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa9ae6cb3e6acd0e47432bdc60b0323ba776d9381122108e3a7153919619010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163519 Malicious code in nokire-zabuza30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38ca2269355c6d81eef9d92f30a5c36578ab85ed9086e5adda8ecd09738603b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170415 Malicious code in verify-ayisali-gan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153bf4eadd8b505e7149149c00446b7bf168f8fecfdb23fef449dc47b1e15a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168842 Malicious code in technical-albiko-tavlniban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060c962e9e28f402bc90d7af8700756deebbec699b37b5ac8b8766c978743124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151025 Malicious code in @miptaa02/welad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2fb54076bdea7cc3e46e2be895cdf902ebbc6aea6349846bd2c6e8c464fb59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156342 Malicious code in inagi-vuma-nunbag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2b12f5575827bcae11e7507a62d68392eb366f2c934261e986f19e5fd5cee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156145 Malicious code in ilal-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afbc4cd7caf3c8bf3f34ede131a9d8f640519206ac89112d9081f1a819a7d957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162925 Malicious code in nokire-loklok69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f960ce1b9c033854bc81cf9c69d5668172805864475e47d79a7ae0beeff1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152362 Malicious code in alita-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01821fd3fb5aba3cbedd7ea0f2de0f8db33002d8fb0a0af1f06b34be8ef1858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164758 Malicious code in rinto-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27875b75c1fc91744752e50c1db0e22971a946aca6382664294537f726e1debd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150798 Malicious code in @miptaa02/kkkud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de11ea24c739ff28b453d944d858b0e839ca779a9ab5645604fb7dfb1ff84e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156032 Malicious code in icha-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10baa66a2c7b0723052f7f44b80a18c6b1fc1a26cd3e6ecb956ee123187c1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154520 Malicious code in diago-kulpo-laksoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c2cb3b24dbfd0e717786be31d31e12edecd322b2d58ff293a8fb20aa6f7b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36e6deada25f1c52b45fb6904a37b3ed9f47690b5af096ce9107f9126c68e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/eras (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e7934042ae646eb94acaa50af16823dbe3a50cfec8c7dc4fc28eb1dfcc9e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...