MAL-2025-165863 Malicious code in shilang-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfc0f2cd5160b8f36a3ca4f7341213eb43627ad974f350b750b40b1021df873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168759 Malicious code in tealoveness32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3993113e0c737d10cdcca1bfa140733fbbbeed2e8c95e4663eba0aef42113ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153665 Malicious code in billa-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0785cc17957bc187c9b59dd34b7cff516c1cd0222618e29de555cf9e71b539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163286 Malicious code in nokire-nanali33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f33945095f54837ba271e3730276bcd12b615d9bc050e5ed3d99d93493db12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151088 Malicious code in abang-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5760945b5d902fe2397baf5a6a01398a66ae0a2d42c9ef05e5f99f9d3d596ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151004 Malicious code in @miptaa02/wasdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc36d05097165f1caf0c7f28bc9e3ddc31f6247830bbf2ba035f2a901fc7aa34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160812 Malicious code in muklis-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1178e3c0f3bd7ce4923406927a1543ce4a692fcdf9534db2891f8fc4a5c5709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152497 Malicious code in alvira-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7c0366776dfd45367ad7d710510e7c175cbcb5ef55babddca83a6120255be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152133 Malicious code in akabi-aliga-aihbamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773557d18330f2c5eb0b700beeee5338002a58114c755b291a60cbccba3df02a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160422 Malicious code in milaoa-duio-nsastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1968ab37cd5bba579758d56cda8a2a10e9ce2b95e61034f9234761b8f417f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153896 Malicious code in bitha-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8370949dbb4f6db2a098eb36be5e00d86d53d231ef46fc15075175c95d9f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150710 Malicious code in @miptaa02/gzsaody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9cfc2d66992fc260b3c5e71ff6f461fa25d2666cd90989cc2f5166b0b864fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158193 Malicious code in lintang-tea34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee8b028c37c5cc0b5cf641c32ce6cdc095de394a054f67138851d4a91b29ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150052 Malicious code in @mipta1/iaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc0998e12ab7715d5220c445fe2e2aeb1bbf92aaf6e8df8716efc77401b6dc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150567 Malicious code in @miptaa02/dffgfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc967239a23751e3db7c9a24dc3d5072edcdf092671a12d7db3ea33b9947cc4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169367 Malicious code in tusaaya-0-weaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2dfb63c7bb04d774084e4cdf016a0bab6a29431a4cdd64c7618802669ecf8c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151139 Malicious code in abel-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ecafa8c20685f6709de0917dfb81c332c463b80c0614c197b2973275856876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160210 Malicious code in masiolan-ofi-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9984d4868c19007e9f8c07bff0e922895a1fd0577d23ea57fd7b4de9a843f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169220 Malicious code in trevora-cir27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c13984030ec8fb582fb859d8a34280978f9859d68485c68fb756b290b0b4ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154860 Malicious code in fadila-poke126 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab8cabfb1f73170b54ac866938b25b53359e1a2557e5c92bd7b38d82435c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...