MAL-2025-152436 Malicious code in alvino-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac02f9578576bc0d6bec2a702d6ff4cd4138add3b18575904ef4702beeabc12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159562 Malicious code in manapf-manta-nayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56639235dbe17285306e28b33585ebbc3c093a0df280be60bbe7f6092574a288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161949 Malicious code in nasrul-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2550a59edae6a3ca707fc8d7861d4f59ff540405810a8801d86a788c4284b303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152002 Malicious code in air-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3eecbd23037d7be05e575d5f74ef289d9a18340d23cf9473ca5cc5d43000e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156457 Malicious code in inal-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e719a49bebf86465df0d34db4bf3dd5ba781d8f6fc77be02c7bb70545d13da29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169852 Malicious code in uinsu-lista-atukamunima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854601b4f884807998a4a1df4e9ef9c021bbc491f449d11587aaf1463638bc9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164314 Malicious code in pitra-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b78646e9bc6d18eb562ef788da7534b3bd33469841bc136e6709cbadea3aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169065 Malicious code in tehah-nuyadtasfag-munra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bfbbf3e64969b5e3109a19bfe161a98a6e1efdd50f282f06a7d7c9193a4bf09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155481 Malicious code in guras-visa-kore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2905d7946caa812ca9ebad256eb59fbb1c13926e123185b3962fa9b6c798949e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150993 Malicious code in @miptaa02/uu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0192769a43da50dab975f349ba64936ac99019f8435134960b290aa8b350afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168290 Malicious code in tealove-darknest33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5035bc4d86ce7cf833f7cffcc1f2fddf8136389932c2badc37dd13e5c32090e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151226 Malicious code in abiba-aluabai-ayabauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd4c4064be12948f3d3861a3ab72353907a5541fbedde265604d7039efbded75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168229 Malicious code in tealove-dana23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efa789ac208d35eb5233072748f2c4de31b786c00e4ec9d28ceeca5398a6750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159968 Malicious code in manttu-role-gagak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a461b30abfbfd83a5b4fbeec9ab83a8728a89b8168a5b2b33c915cd5cccd5241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167465 Malicious code in teagood-nalikami63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681d5dcc3c619cd70003905310f3dd05164d36b64604990899b0925f1dec9dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169972 Malicious code in uinsu-lot-bisbamayuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f374e20336eaab5b99d1ea45c19251964042dd949366211af4c8f2bd4dc6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164363 Malicious code in poli-akiu-alubanna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb1b3c13c7865e7b915abc66adc6403241f43c45fa077bcbad762bb00121f1a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169354 Malicious code in turisna-sgsd-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765f2fcb62caa592e0babb0518d2cbcf117bf6b8d475cedb8b29065f4cb27b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166741 Malicious code in teaa-reborn44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b66a5253ae142056a46c63faa1f05dc9346f8271452e66a273e3b5af89a0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163426 Malicious code in nokire-sekiya37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410af9a6f3a201bb164af56317fa75f0d947f866233a97bc3da58f2436adf99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...