MAL-2025-156019 Malicious code in icha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb09fb9286901ff7e40445ed548cf13d84f9833430ac5d061d8823766aff9031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153473 Malicious code in avomainah-fagais-oguya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d5f05522e506934b3dc4e934d40a1f864b982bdb84cf14af1dc0c41c2d0fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152426 Malicious code in alvino-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72144a8dd0ea71f0e930499afdeed14164f488bb243672ec39915db61e0a1675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168538 Malicious code in tealove-nokire11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7dabc028b8cff0ccbc45d71e58b4934f0290b35654531edc6e1558571899088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165526 Malicious code in sabudaaopa-muyag-bafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9bded51d73714b471fc72545d7eea1b1fb2cfc578baad9464549a9caa90c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157916 Malicious code in kuroichi12-discussion-wide (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0990336dfb79ea0c8c6dc3c46097edb0f01b281bd807cae4c7c770f5029a3914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160760 Malicious code in muda-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb9e75ddf29c6e561c92e36bd816f9bf989bbc8383be114a0985991ca2542c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158584 Malicious code in lookingan-namakiki70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfdc6ff007cb5d9d065ac984549312b0949a0ab684d44b348c6e8972f3fc462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160573 Malicious code in modira-fuhopia-janadurai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db167abcf6bfcc39c9a33fa02b1f2cb32dea1c0633898dcf9871e2468e3fab3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162951 Malicious code in nokire-loklok92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c91f06d94c496a47ad9a068e32d8dcd1fbb877f5c6c57d9bc6699752a41e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164627 Malicious code in ramadan-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04e4e32b3fb031cba4f49e4de8afc8b5cabc6cb56a2c13e28637306dd049e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164057 Malicious code in parwo-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49bcb7db125e2f10a45c0ab15a950c7d47236e40960984de417d4ae67d7e0395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151454 Malicious code in abiua-mobani-ayumanom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc388cb056bb52a1dc6e8889a3b92eaac059a80b79dcc591778790dadd1c4332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160938 Malicious code in munir-terd-tesrb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3933ac901a98132577ccac62d2e073b2cb25b728eee6912554be84bbf97f0aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151921 Malicious code in aibona-moile-aromagiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76395dbbe03b589573d1bf7e01e446ec0b3fcc2385ba96e44fad1ca288889fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169822 Malicious code in uinsu-lisa-amuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19cf071a1d7297f9ff71b6fa30cd33536ff002579156ebefff3db54f0d938c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157609 Malicious code in keyla-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd726e9c3af490c3a28a890c174032c95aa3f61e1ed5a728559998a2a3a1f915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160447 Malicious code in milraoa-miffojpa-muiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb63ba331021b08d0cc08dda412b1954375d563b05ea4f9e03e12b92c0427213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154916 Malicious code in fadila-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 142cc8b2f8fcd12cc387bd4fc43c6f71bc3a537226f39f1bbb8504a19a670ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169200 Malicious code in trevora-cir144 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c5660831101dbfac5d4232b630406cfa70d2f84421ea9b0532946ecdafeda9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...