MAL-2025-158422 Malicious code in lookingan-nalako15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfbb042baef7080e37873c603db7df4c374a3f8cc9938b6530608afc2291d524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157648 Malicious code in keyla-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c827ebfff9b2763377670a3ded0f1745e11a61da55a4cab827bb1830dbafe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150927 Malicious code in @miptaa02/ryu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d13179f102eec07c6341f33622a11cb92adfa7a4ff32effac30f1a83b84aad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165567 Malicious code in sabuvauakli-nalabulaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55bb6dee3134755dbf9204c4fe12beb191744d2512af24139870860ba910415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169130 Malicious code in toyota-cir10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d572b2215b2a318951c7ae73ba218e4bd1cfc406e7be9e1bce1e6ab268f048d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165531 Malicious code in sabudaaopa-muyua-bafuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920ca95a111ee3bb58d786b819fac833a25c2529cf55ab599b22d7f2c3d2e87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152398 Malicious code in alita-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c9519e0bb5761f668cff73dd36e1360e4d7ec9c90f9fe7f8e173bfcd1c86b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153632 Malicious code in azhar-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da7ac1fdcc85839366dade3ed3d7364c738200d0019616a901a18eed85e7451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162678 Malicious code in nokire-kilua84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6657b9d9e62e0e73b7874b53c4ebc771110038c78c085bba68d207962740b83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153194 Malicious code in avminah-fagmas-diagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4048748e8efe59a979a87c64ce1d7139af754da60543efa64c1127a4cf111b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149938 Malicious code in @mipta1/asarar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0a963a4e6504bb71e5b53a299d38f4db61abb00134575ea384977e5ae8dce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152057 Malicious code in aji-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b914fe593dddf32f289924ccc558ff16e6e470cb89a44613f217bbb676bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152132 Malicious code in akabi-aliga-aihamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08be0c887c9407fb0933b43e91db772bc32bb8b4ac73f01d9027bc66a7e46d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162043 Malicious code in nasution-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e461540c13b0d87a0b5733de190a92b64ce8daab2cc679d7faa43602762c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159173 Malicious code in makan-aiavamoba-iaviufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8878884c88d4b09cf4309493463054256be9d1545e6d1e5dc0ff4faec4ad6764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161178 Malicious code in mutsrio-nuyait-muty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4795c14694676d128dd323d54794a129c40a8a3803e5962b0f81afbb6c508575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169278 Malicious code in trevora-cir8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb0473a519da071054d9631383e12a0439e953ac5d51c85de37b8008119523a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159836 Malicious code in mansila-tiala-mhlni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7de7946f174e48d53580a5ddb015fc038cc4bd8866ceaf6039ed6f87ef8f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162755 Malicious code in nokire-korean5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b135c4ec292fe6301f46d78ece14fd2d1d16a6bafc2ccc173260322d606f9f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166352 Malicious code in sunden-dilak-nulikanukinatain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9ce49a3437bea14499646be40990f0b5cd40800a28e15d61493cd26ea123a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...