MAL-2025-155342 Malicious code in goodmanmax9250-numeral-tonight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b92ba03ccbc31eaf010ff3f8a513bc375f742cfbe0d721bb535dcdfac7ced46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166114 Malicious code in slamet-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a774b0f7c6e23cdf88745729235c405da93533d3a4e57060c26194ac0856dc89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156019 Malicious code in icha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb09fb9286901ff7e40445ed548cf13d84f9833430ac5d061d8823766aff9031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159818 Malicious code in mansila-tiafala-magololani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61d2d92a74634a5a603ddb7986d0d96ac823a020765f3c557c5b61ce40a19a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157496 Malicious code in kentung-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1543407d7afb3e06f90e4547a4b03900c1c84f7fd7b63804a3bdc765e7c26a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162203 Malicious code in nokire-abimanyu85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 411fa0aab6f595b3a90f297b723a4903bfa8adacf9100ae99fc8365206cfcfb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167916 Malicious code in teagood-yakuna56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18fa18ca17d05a04385f45847ce0e7fba21530454be38c3ebfa5826a0ce948ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167383 Malicious code in teagood-nalikami110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224eef888fcf06a7e7e3a914d631a3c338b8488bce4997300a7ed47b3236e69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170015 Malicious code in uinsu-loti-nai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9f53cd55664c2fa935b0b15cc460f4f95f683e1774b517f045fd64dd044744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158701 Malicious code in lookingan-namakita85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4a1ec97303841ceb2c238afd04ddce3434c47bd341f318fec7095ebf69639e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166465 Malicious code in sunderlan-uylud-vamknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cd7c2a2c7cfeb7cb617cbf1d357282776079b6cce7f175d9282acc8e7de7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150166 Malicious code in @mipta1/nhida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8529c92494ea971aad6653c19b801f9026ab88da1b4c546d913b2f7122c00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168442 Malicious code in tealove-nanami14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c706a8ea1c6ce2934d268a1949068c7bf07182bd3c0fd3427e17eb2f4168339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157942 Malicious code in lala-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab8f79cc1961f49b7eb5b85e9fa0465aec3c0f8d5f9ca777a818f7cf3d35da13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164771 Malicious code in rinto-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f366a35c79b62007d795df3130f0a7c25b6cbc53608c62ade5d5bad419fef7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150601 Malicious code in @miptaa02/ewihs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d6621ce6d93761899470a550d9298a277e1d6e2482c70dfc3f2113cec82551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169924 Malicious code in uinsu-losit-dulu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33decdd6008ef3d80b8d3751819566efa1d5cf474af42d2f8b4d3a4a141f49cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169527 Malicious code in uaragifa-afiat-usutauafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485afbdb8cafd83e03cc23fc06a67b5774f225724d5862854b6f45af8da292ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158157 Malicious code in lina-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa54d84b1ba741e77b5af06c29d8750dbbf24888d0930c1493dc46e6ffb697d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164935 Malicious code in rita-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7b2dc6901b1e52d962b8365ed1c9790c1df7c1acae85f105a0973535af6078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...