MAL-2025-152497 Malicious code in alvira-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7c0366776dfd45367ad7d710510e7c175cbcb5ef55babddca83a6120255be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152521 Malicious code in alvira-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f549283d0ad62be156fa410bd2a0f819555bdf9e35d52dfb11883044f07394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166431 Malicious code in sunderlan-ud-vaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf9239b069853589fbe5cf749967369a03f08ffeff21de94fb7cdc3bf463af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150710 Malicious code in @miptaa02/gzsaody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9cfc2d66992fc260b3c5e71ff6f461fa25d2666cd90989cc2f5166b0b864fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161682 Malicious code in nabuf-otomabin-nuyasfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a046588c01ec2fd7f5530111670a42e21f2d48a8b184bdc9b53964c9a5ec924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164768 Malicious code in rinto-poke114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071c751532c498bdc45a2fa1808c85d9114b2bf368b730e2b442d0db443c8c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168776 Malicious code in tealoveness48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b0dd8d3532b94d77950397a2f43c3718add6c925c47957160c77dd0d3300e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154574 Malicious code in dian-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e08c1d99ed74aa75328d503f37de380a9574c8f56cbbb546b51657befcbfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158277 Malicious code in lookingan-konami19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a559a75fef06b151d818366c6600d27548c8fd8d3473a5556658bba77c6612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163829 Malicious code in nudela-rahfae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038ccf42158ddf7e6ebbc9b05c93b66a83e4a37d6a8b513c6ddaecd280d26a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151807 Malicious code in aiboa-mioliupe-apuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744761fb3612e8fd116534c4ec1900f016c41de980ea6ed4d401dbf6bf79f046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170315 Malicious code in verify-ain-uks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db23131ef3658eb1bf94a40373d258e217fd7324d2b12806bb5a1061bb2c6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154287 Malicious code in demdadf-sadudar-nurti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b91d9559009a5fc29c8bd7bd541fd0a2b229abf687c8e4763f98a7d9587775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153435 Malicious code in avminh-afoagi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b1d7e26d960ce6168f17f4a302e8b8a14f2aced3286249b33cf2522949df8b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154860 Malicious code in fadila-poke126 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab8cabfb1f73170b54ac866938b25b53359e1a2557e5c92bd7b38d82435c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169220 Malicious code in trevora-cir27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c13984030ec8fb582fb859d8a34280978f9859d68485c68fb756b290b0b4ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157099 Malicious code in jimmy-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a57405a0ce80bee4600126c8747f052d66882002bb393ae09d2c4a2db94f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160210 Malicious code in masiolan-ofi-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9984d4868c19007e9f8c07bff0e922895a1fd0577d23ea57fd7b4de9a843f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159382 Malicious code in manadsi-safia-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5015db74c04f2e76aaaea290fc17a0501020334a1de6c9843da7883ddeb32cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162523 Malicious code in nokire-genji35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1363888fb58547787405052e91c331388edf66ae0af41099ccdb2150df312f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...