MAL-2025-167462 Malicious code in teagood-nalikami60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eae227ca6f9405f2558d9be11ac3e79382c3ff0a5a40d75a75f4a807a42b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159488 Malicious code in manadsi-soroi-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a8685df02f3d31048f2547898d82abad7b31aa43e583f4d02b258ec125cb1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157021 Malicious code in jeep-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db87ac483ddddc5bf2e470ae49e182e48d970f292f429f178993da330c9de5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166551 Malicious code in syahlan-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a690a6301b012302ee236db43f628f3568d5be736dfb1e04581e86a8d93f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168293 Malicious code in tealove-darknest36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd5199e48cc6edad6b04e699e386731e5c1bbe65a5b646b25b1859f5040f8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164578 Malicious code in putri-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed7902c9775499b9f3b5b164844ac748c1b6ce2b2567b77a7cb1a75e5bc4703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166151 Malicious code in suharta-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7eaddf5e65053807b7f9bcabc0dc35ab65d58d9581f51ed81aa67f334153ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154551 Malicious code in dian-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc09701127c318e88b09100a2c7e4af648c20bbaf2eb9183b7fac09a499287cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/slv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571041fae47cb37a94f3b38228a76e1e6a9b3e46ffd0b2074b00334dd5bb5453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170364 Malicious code in verify-ayca-amalauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc32de0391c92cc2b8cfdb658bc11fb7064503d3989fb5629f5be8674ed4242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159279 Malicious code in man-noatmai-agamiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63246ddcdb49f3d790708ef98c75f8b2f5c8b425127551a31faecf69a8d3f643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150937 Malicious code in @miptaa02/savia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93aa5d7b53e8036b3c9873ebd5d67bc73b94f178247ce70b08d3b2c2d6c711fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153852 Malicious code in bitha-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c2e282f0e9679e11bb3d2a094ce4d4064dd3ec8d26ec9679e58022e37a3c2d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165778 Malicious code in sau-naki-upsid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bed6e2687bf9552d36b578d87af347a4623878ceb8b74c179369fed9b74a3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152719 Malicious code in arif-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6468771d3c80ee6b1203965a96a69e021701b0e611390fe962c4fb12c9d3948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162055 Malicious code in nedarioda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c655abebb0da065c59a0024c120f84dc728b6b0d856708af4e561dba693261bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152985 Malicious code in astia-aldofa-mafkol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c47e9dc856e70231b9ef18a3d57f679feb34b3357789bbaff55674010a84f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150323 Malicious code in @mipta1/ytuax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239347468daf594e6441cb71b3043b5dacbc7ae17a79972fdff8a6f068ecd78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-ini-zephyr-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605fe81490d64b2c1a772699d84c2999f71b970b02bba2e93361a77189f5dcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-subscription-flare-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b71f9761dca3471306127175edf9b552a4c30366e83d5e3b6cd75902c0ef97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...