MAL-2025-170025 Malicious code in uinsu-loti-nalasaubalui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67a9bba69cf09545f4daedb372147aead2d2af0649a2d79d74edb3a7c4f1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151033 Malicious code in @miptaa02/witaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27f8865ce8b5753e086c4247df4436d40d248b0ff7417cbc893a29095622987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162785 Malicious code in nokire-lokcek31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe654f7863b260d7b2fd03526f34e58ba42907104c36c6f3e054a48ba9431e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158465 Malicious code in lookingan-nalako54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df94e70c2ce62a67ec88cbbd2b3fe28b851fb027a7539447b946312fded4652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162322 Malicious code in nokire-arhani12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e545a2d35f69cdc2d04d0a8dae1c2d7eb4096bc0af1e34d022dd48f026ff4ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168541 Malicious code in tealove-nokire14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2bff48b3e09846cea2631c096c9c9c6ac188d4f2ca04e838a6a9ee1647f781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150779 Malicious code in @miptaa02/jisfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e05a239d626f459581b846cf822389a50d1d1d24ac39a7d32eefbb20f9754b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153694 Malicious code in billa-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a42a69b8cf15c5a42c3ee2b54f2aecacde0e9d7aba1da4df938d42b6e15ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156601 Malicious code in inufgi-goa-jamna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d50f9ffc4f929c5937d649d9c2c5352e65958084f19c19f6c6f149bb0a8389e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154457 Malicious code in diago-kuli-luokuakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0689fc62a1316582a0f57a027b76efe629caffaad838a28e1dd68635dcd0e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162237 Malicious code in nokire-akaza26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb59eedef46f1a211364ab88c9fa5d665b619e0815cdc4ac9a8c3f8d64d7266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154134 Malicious code in cinta-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe9784354a50a16c92efcdd9cc8f33ed91e9e625d019356be92e04a4eb5e449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164795 Malicious code in rinto-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50fde11e2e7056c2e680739f6fdbb0afe2ef92cb08d4ca5f775091d387532c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168290 Malicious code in tealove-darknest33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5035bc4d86ce7cf833f7cffcc1f2fddf8136389932c2badc37dd13e5c32090e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168241 Malicious code in tealove-dana34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ebcd004256ef99ac7a06d614428d0ee753dd60479742fbbb8f72222c220550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170301 Malicious code in verify-ain-sua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9050e5948f3aa7bfc74f04c05246f5bcff48b120192eb278d1f661ad12b800a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153517 Malicious code in avomainah-fragis-ou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3035a995c55228284314da1f6ee314fba225a3c353108ec487da33b27fead113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145299 Malicious code in natural-indigo-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f37c805f6dd061de76399d9b52952b76e3b19b28a3fe2cad5acb0416bf9ae9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-node-sass-leda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b532c53d3667571b50126b7f8df59d25d564f7f2f526e3f6f2b6dc5917495a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-sedna-gulp-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c770ec13334189a45aa0fef3674fecdd3a537588a7da860f88556aad8ab09dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...