MAL-2025-156072 Malicious code in icha-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17e4a4b7cc58d8732c45ecd43f76bb9edf9992134f33b3baf7071e1f27d3689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166865 Malicious code in teagood-cuekin95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be13a41b84c69febe5c47d14e53f323540a36ee4ccc44da9af4163163d9511b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168790 Malicious code in tealoveness60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b455b2bc36a1a2b6c76aeeb44c064d74971cef3550f5133f0154850859dedb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160227 Malicious code in matane-ras-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6469caa7cc84a7b6766dcdea2391fa467eeadfc0ab4585483ac1d7e5ca91c2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149961 Malicious code in @mipta1/asnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cade45dffee91f9b151fdbafe70d67ffc094d90882dcd7a204006875409e4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157515 Malicious code in kentung-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d81e763987a1c14a85f43018ba91d69f1547f6b86d866d188395246339c697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155024 Malicious code in fatira-goadotda-nutardo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446942ea06d5604a9cd7af9dc7be24fa8cd87b67eeb96cfe6f0b8a21badf860a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160857 Malicious code in mundya-misptasa-riadya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28512c55c98a5371cf773d19867d024d998d7707bea38bb252d805f46d8898a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157390 Malicious code in kamasada-nuyata-buyatad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93efbc8f0994a07a15377c7a3c177a3f11c4b5a6c785012f602643fec88136d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170486 Malicious code in verify-taic-malu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0155fb1d38f178b41c319c645e0e5b4340e259df4c1609778f5d1395a66234d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166086 Malicious code in slamet-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce3e94aa84cf51578c9b4aa09c178d754d10b15f9a8c63cf7a6688ab94f1fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166698 Malicious code in tea-osss-miuyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31071dc820401260d2045a86aa93867e5b39d637022a24515bfb5c92f5d03b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151097 Malicious code in abang-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97413bded9c81f5de8cd8e493392b08d2ea76fd435cd0c6909df3a729dde67ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164669 Malicious code in rino-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c4347b4bfb5e0104b78737d6456847a6d87cd01839b0024ea89198d6e5de45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160404 Malicious code in miftaiky-arrange-hard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15643be95611624d290c24a1219be3f6d0a0dbe3c9af4e4eb9c72cab61c46c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160720 Malicious code in modirai-igono-jiomgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de66b62b01ecc84e4c299a3c5026b7f859ea8eab7b5f329229657521ce7a09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153021 Malicious code in aviah-afgis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2439a299ae5de1bb82f180c6c3e0e84473a8536dd9ffc7aa88b5f137bbbf4c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154639 Malicious code in digo-kaimoi-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4daf305842103b869a97565fe7e34103437580e9d1bf86a7ed937a8cea9aed4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155322 Malicious code in gifa-otau-umo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d967898c499a56420cef668d5d4ea3d311659b6ccc0b3fe2ae3b20ff64f38ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163717 Malicious code in nudela-af-gaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f4fc2e294a60bf21a73144f00c6ffa5d19ef416cc38dc081ab0d578466c0d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...