MAL-2025-155986 Malicious code in icha-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020c8adda2cc9ace9acd5e91894eb4361e51b562c83b195285e54958b4f6e246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162477 Malicious code in nokire-arjuna8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ce6bad41c174aaf06431aabb248bacecac5092405498e761f6218c956a9992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166431 Malicious code in sunderlan-ud-vaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf9239b069853589fbe5cf749967369a03f08ffeff21de94fb7cdc3bf463af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156563 Malicious code in intan-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5ab704a2887617bbc85bb31af9b3ad0e8e668b6426766c4ca7b8b022e5e0ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169205 Malicious code in trevora-cir149 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b125ddc1c8ae5a7507fd0b75020c384c78a3b86427fb23bc7690b35179403019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154677 Malicious code in dioago-kamo-alauliaah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e7d156500d4e755c3fc0cbe6d0675be1e3aafe43fe5b78a35bdba598160107a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151779 Malicious code in aciyua-idut-dajuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b977b000c4c12fc11365eca0c4cec83e1da74b05124ce62a266aafd763fc9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153896 Malicious code in bitha-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8370949dbb4f6db2a098eb36be5e00d86d53d231ef46fc15075175c95d9f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160210 Malicious code in masiolan-ofi-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9984d4868c19007e9f8c07bff0e922895a1fd0577d23ea57fd7b4de9a843f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158093 Malicious code in lina-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2a7feb837ee22b38cabda9460c1c7400d490e75a37750dc6b408075c41c937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157102 Malicious code in jimmy-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26443817092a2d73cf2e33e985243bffc954946bb7590ba802b6ea5477e9dd6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154574 Malicious code in dian-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e08c1d99ed74aa75328d503f37de380a9574c8f56cbbb546b51657befcbfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167989 Malicious code in teagood-yakuza31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d724cf12b09ca8c37bdf9ac26d47b18397706aa861a0ebd2184075116cc821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151139 Malicious code in abel-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ecafa8c20685f6709de0917dfb81c332c463b80c0614c197b2973275856876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169453 Malicious code in uafagru-musafie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de838e9eef4765d95276dc882bb61056ba1dbf4670790d8a77a55e2090007ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152115 Malicious code in aji-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector babe48fcefc989db5d5bead361044609698799c441bffe048b24a1fb23a0288f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160483 Malicious code in miracle-dibook-ikalaiku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210482db635d1dd0ed5039c49664a5b767a36e9f42eb0de638468295e9bd1003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150346 Malicious code in @mipta19/asallajaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4ee23628f8975b32ff8b9ed96b710b7dfe53240a71c58cb87e9b7f9c51446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161695 Malicious code in nabuf-otomian-nosudfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f97c364c2a0d96e04dde7ebe2d31872c0185f001b8a9919f80f478b2254d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163938 Malicious code in pajero-cir10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84708f8be4dec3cd40bb7dd7e07272e226ed8e2f3ed193b7f0f7bc9253b21b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...