MAL-2025-158661 Malicious code in lookingan-namakita5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9810e24aa2678b280ec4aaf8f86075d424ac5ef063aa2b377e95f9cae8c9b475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165832 Malicious code in shilang-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d409573f8a7b3792e2bcf204c45a1ca2c67c266bad484400fca3923c24351dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162174 Malicious code in nokire-abimanyu59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d747aec6b17791f31424ec2c287a5855c567e7e4e50b4b5d01f2198f8bc480ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151283 Malicious code in abiba-avin-abpu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b99ff59dbbe267487e4190fcb02de841b87204f1cc841d5c2adab745b64b072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165820 Malicious code in shilang-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c43ce69d64ec5406444383552e1b65f47928ff01874574e68913baee7fdd97ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150029 Malicious code in @mipta1/gfhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee2be25c15e3312222e0eb743f76a0807f707a1e68beb348562e06e4dfc0a8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157482 Malicious code in kapvino-soi-faoagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f87526c2a1457ce69e7846e7811697ed23712ae6b7825a571c84c068b53dbaac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154502 Malicious code in diago-kulp-kabuko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d76d15f8477581a538d54a97037e543ac1c8a3e8514ea39a2db40ae9e9939ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152000 Malicious code in air-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef93e5c787b88a98e35ebca4baada9b6788af46f21a64961273b8fb06deddb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159082 Malicious code in mahnud-nofity-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce36c79f37a141131c6867522efa38a8419201ebe6f6d32cb3a5e11bf7c9f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162090 Malicious code in nokiragne-asfafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9074ee76df2f7cbbf3fad0fae6858939b29c227efe1a9e9f86c209f7673b877a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156342 Malicious code in inagi-vuma-nunbag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2b12f5575827bcae11e7507a62d68392eb366f2c934261e986f19e5fd5cee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150546 Malicious code in @miptaa02/axdzxody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95dab39df7152e5920e93c6e4035181ea7d4c827964f8a512738e8d0a9537643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166980 Malicious code in teagood-lokina18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a4fc831dc28981c0b1ea8d67aa057e6c1cfbacb08517c6239e1eb9304bce67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168489 Malicious code in tealove-nice12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a1048734147638de6219b988a789aeeb90b35607a6e251319f8bdef85ba304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166190 Malicious code in suharta-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b533432ef816e86b90f13da5e5a9ac25e285d4c73f2ae38fcb67b3ce666ade83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166101 Malicious code in slamet-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7497b7b4731adf26ab8d4297fdf4727fa5e9b73808ea3319fb904d609f9069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160871 Malicious code in munir-butssdya-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094a2aa908a746c3b3ff5a5e006767608a6e0e63e62df177c6921a74e00a1d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166465 Malicious code in sunderlan-uylud-vamknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cd7c2a2c7cfeb7cb617cbf1d357282776079b6cce7f175d9282acc8e7de7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151300 Malicious code in abibua-moban-ataymuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aee39d865136932a3a481bfcf34f71e622ece8852687aca2aa7f4ab0e277418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...