MAL-2025-170562 Malicious code in wulan-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454d3d0d6d5f842d4c82e6795470f4c212f8b5d09b75d5590f7b442d8a251711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169440 Malicious code in uafagarug-midefa-fatusut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d8aeaf98de0a59d1b262cca504bbad534034705230dfbf5dabc3907ee63f701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157029 Malicious code in jelek-r-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee14f533151602d16e016866b4d443fdb28b89c357a26f9f9402b6810235a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164818 Malicious code in rinto-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42430fb5bcb9297b28c940be76d2040cc87294ae73e8c5276f808ce471683c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167070 Malicious code in teagood-manaki1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbfe1101a8698ab8bda2c496f06a03c526939c648b4edb2f5bd1f7edeb22cd0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164685 Malicious code in rino-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd093af895f7562a2b62d704d301258d53159cf3377cb46eafef14f63d1a6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156202 Malicious code in ilal-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0675635ec1983e3fe928e9b65d211e3e9e7a83c6ea5829304060b03512559ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151033 Malicious code in @miptaa02/witaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27f8865ce8b5753e086c4247df4436d40d248b0ff7417cbc893a29095622987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158017 Malicious code in layla-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c98c5b221d68a13ee6ae678d9687e436b074c282caa53c30dd04270544f1b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163323 Malicious code in nokire-rara35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f786de241806a32851e5df00b69ad43ea4d7c22b9f71c1fe9034014eaba1cf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166303 Malicious code in sunden-dibiuk-itan1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed821ab8d2cc2045ba952f71838c00e1d303210d19f3d20e94e87eddcdb26903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166741 Malicious code in teaa-reborn44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b66a5253ae142056a46c63faa1f05dc9346f8271452e66a273e3b5af89a0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166452 Malicious code in sunderlan-uyilud-vamuikusuabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16def37420421af35dbcca7777dfbbdb92692817d4a9826eb510d4fdc87ec89d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159798 Malicious code in mansila-tfla-magazoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc948ecd5622ecdc843933570c1eddc2c75a07b528f76e4977a0f910194b6aec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154173 Malicious code in dajouka-faa-sa9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a44fc865febe301b0e0725554bbe5978e5ece62968c57d6f91cc5ddd7254a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155643 Malicious code in hafiz-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf889801409aee1e60b80c203549aeabd564161769b68e736c6ea46ee267145d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167154 Malicious code in teagood-manaki85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536549330ac7a765bd4db6e079d9758efaeaa40b79d93b0a20659177ee0b1e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151622 Malicious code in abuni-niia-luhubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6df9f5f9ccc1b47dbc595ddfb30b9f030e8908c5ccfb3dc7ed2306b8a334e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168100 Malicious code in tealove-aruma43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb33e86fcd42a51356ae19478da434fd5cd4da0bbe0993bf342dd164a6d2b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169335 Malicious code in trevora-pisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b32a80dd3859367bc4874c07b1f081de4cb2c173ba9817f2db97626016815bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...