MAL-2025-170114 Malicious code in upa-lublio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5546e37594e36ebea64e2a6e669189701df0ef8309b1b97f71d804da81dcf3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167147 Malicious code in teagood-manaki79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 787e0d1a25e83785f749119a7525d42a0e1d775940de52fda56bbd4a6666b65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153085 Malicious code in avminah-fagias-fi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79dcf5e6c4974abddebe417dcd7d7b2417e383b655692f817f9dab5d25c74d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153559 Malicious code in avomainah-frasu-oufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86df6a5266501a6c663e302aa7c57fcf6e6058fc59bb25c13515996f6421e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168677 Malicious code in tealove-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50bd2f40bc126ed059e9f4ec52213de4b4a8e44427592d2da2f084c7c26c2c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151399 Malicious code in abina-amugui-anucamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ec72a77a996d4d651a419b1740a41ba38121fe2ecd852f2b15cc021d4ed3a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164667 Malicious code in rino-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9eee02cfbbd3e4fef5074055d92e5eddade931b47ba21a833105195717132ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161950 Malicious code in nasrul-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be82320730b739e3836ad1bd3b11cb9c200a6a32b753297334bf7c68b92b54e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161789 Malicious code in namae-nadua-mav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd9eede8dc7eb590c41cde287b1d239e1e475082d36235fc82c0f57a582c492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154400 Malicious code in diago-kamuli-luaboquak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d223e9acd5ed0654eba846174ff0dc8a588078b64ba5bb2e8d8cc7bb9034424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158624 Malicious code in lookingan-namakita16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b266ae854bfc430b8cf09f8fc13d322842d90a056ccb5c73f662e0840b319c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167791 Malicious code in teagood-sukuna38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41bcd7948280916b16ed247e066f5729feafcffa521b0c1469f45f5fdced42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159281 Malicious code in man-nonatai-agami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f30cd02920b034257f693df1230ae45db72f35dfcb2816e7465f8f4512cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155077 Malicious code in fini-savio-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41159fafa0c9f93712093609d10a65718e8d0aa07f7c6805a3ab4a0d8a59edc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159264 Malicious code in makani-aiavamoba-ufiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf1710fc35acc64cfcc4a0a1717acccedd1f35c111ec2906ac2384ededb823b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166189 Malicious code in suharta-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7caba44dfcd76905832522e43ac80921a79bd8093a960afd6219201a921930cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155052 Malicious code in fauzi-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a4c5fda288a42df270c080d32a1b0c5f8356cfe149fabf94dc45f338a874f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164528 Malicious code in prayoga-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642fa2d8278d48e1bd27e2d906c15da09f50af5d629817bdbcab8606db3eed02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163820 Malicious code in nudela-ofogifaf-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640686d6057e0f7cd97450c8d3d6a9ac960594b7590364d399e3fa0929ac62c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163698 Malicious code in nudalea-ofogiari-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3edbeaac2be4d9f1981fe9009617852ceb3f9fcdeaf59ec387be9db80ca826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...