MAL-2025-158916 Malicious code in lookingan-namalaka99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234f48ba55bd26cb9ea4d68911c50937dca4cf4a409b09780b39198ef9e534e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168890 Malicious code in technical-alnbio-tolimasy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f915559dc754180ed3ac605f027ee455e884100c2fcf29f52ca2cf545dad8f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170120 Malicious code in upa-luli-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02a72ac62dec9614a05d257132d44903bbfdc6db0ef344dfbbce4bd8df4dd78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162745 Malicious code in nokire-korean14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d91afb7bb63713c0cbdc01026270517e971ba792fbac55260c142c2f50fa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169465 Malicious code in uafaru-tuamat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ef082721b0da5c098f12b4b40a69cc03c713625c7d48d6478f1d5a2a61e769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158867 Malicious code in lookingan-namalaka54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc15d123bdcf6cdfece8647544647d9bb99e48125b83e17d4b2bd2d74522fb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153396 Malicious code in avminh-afgais-fafdfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8366a894bf3abacb3fff7133e4502b4a5a05d3cdc8734ac170d1887b662d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156008 Malicious code in icha-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf34996fad6689e528ed366289df80066952bc5e0c7be2820443016c2275ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152111 Malicious code in aji-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e869f4a7b899638ff24719c1c7cfff6b17c3045a679311c4ad950bb72cbae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157537 Malicious code in kentung-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc621cf66591c3cd2c8758384d9503086ea8ad18fb8d1eb065ca38982b7a13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163693 Malicious code in nudalea-ofofiari-agutaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0f263963eb32cde659ce5a3af166cef620369825c3821077dc552d84bf46b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160868 Malicious code in munidr-teddfrd-nasuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3067d5f9a4c1787264dd394097f57b7dca0d7abd61d5b043be34a109f87ee6fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156713 Malicious code in inufgi-gotumafa-anmfozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8049813a94f12c1c10b83f4e4531349a69963a36cfbcd0bbb1741673a90d2a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166718 Malicious code in teaa-reborn21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aba3879c12ccbeae82cc83109a21e73dad135820a4571c80125e1884dbdc63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150557 Malicious code in @miptaa02/dadfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c00e54b29699040e7eabcf444c969e1dd6b1f9372a24350ad83163c7e7ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165199 Malicious code in riyanto-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da04cb8b8589e5254e53f5582d7302f1e31c5702c23ce94a0dcbdac5cdd9858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167703 Malicious code in teagood-namakai48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7709d3ae5b0cfdffcb4facb79d8b72e48c23cd0ee093cec50a8295c14faec8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159651 Malicious code in manda-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0be47f2ad0184e26d571a9974c7968caf44637c3ba4a1b5814f4a5c36bb775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168099 Malicious code in tealove-aruma42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79321dd6ab42ee3b18eba6b5233d2dfd2645b487905ed65a2440a6639edbaa86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150214 Malicious code in @mipta1/sauesdpf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf3b598024b30eeaf8cadd303498f3cff6a35eac77395f7d7b568d5cebca3c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...