MAL-2025-152934 Malicious code in astia-ala-malikaloafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3688f017ce9ef36c98d68ce3aa4b30b19f272322e91daa4b8d66fe22d39530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161512 Malicious code in nabuf-otmban-iagafaipo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd14fc6e564d19fd88e20488a3f6466e66ed9cbf3a10fba2d617c5c49c326017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170393 Malicious code in verify-ayica-amalaunioama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175dff4d5b66b85e5a703797bd27f6f15ac67a53d59b31774ae23fd217c8d87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160182 Malicious code in masauan-ofa-batovuila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5fbc712c4eea7e4f5c1782babc963680361e250beda10ad81bf048298c92b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168088 Malicious code in tealove-aruma32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6242e95d30c9dd191d9438983f7ec9e569f89c49fae81728548c71b50a5004f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161598 Malicious code in nabuf-otoimban-iag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4ad5d050c0e84f231933138a0f6315fa0516e6d242e631cb5280cb4c13fac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167113 Malicious code in teagood-manaki47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d46e5304353d116e5bd314e66e6eb5339cb449c41c5403d058f8d01da9d5361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164755 Malicious code in rinto-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5329916838c840c3bc93ee336c2db4e53bd559527b81d9e9d0a7e7c368a95204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154628 Malicious code in dian-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13cbeba60ac5d3ef38cf70120cee28c5965562c6446657e4322d9e9217862097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158946 Malicious code in madan-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7e0b1aa788464bd5a9bc55a0b06155270ca6b26c6d20e4b6c2a41c607faf3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155649 Malicious code in hafiz-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1641a4b635441b57b08341c58c0481814c2fe03f5ce7e4cd2ecbc37a7ca2f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169339 Malicious code in turisna-gd-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 762ecda3aae96f19460a80dbde5faae964bb1b3b9aaf86b24eb1512fe650ae4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153397 Malicious code in avminh-afgais-fafdosafiafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4fe2aace4c5e498133aed91e955a7f9b59c22179540f59ed1681556fb7983a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164175 Malicious code in pilka-lniu-kanukakili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56857214d67b3876f84e72d99d7c134f33200bf5e20012bb3b739e9b3787af14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161393 Malicious code in nabuf-otgaf-doigafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ca8a24cd39f0f8d55f02030c55482a0090265a2dea395d76e8bcb7caa1a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154175 Malicious code in dajouka-faaa-ssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27eda1bb5dc5514bba300ea490c6c8b4faa8e4217636585d356d045d03674755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154972 Malicious code in fadila-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f7c41242bc81e00b0321092c34a3f77eaffcc9914ef739ce1dc22b14372b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161245 Malicious code in nabila-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9bbaff4345a7eb47521b9505ef629edc16fbe6ecb2d864969173909312793c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150917 Malicious code in @miptaa02/rgmyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfaaafb41ddd6c1878d0060c38a5b5f87c7e1304f6466ececbbbf37f6d9d432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162470 Malicious code in nokire-arjuna56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b1b8231d62884ee29ccab59a31456fbb86e8ffee11acd5ae5a630bcf300ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...