MAL-2025-158481 Malicious code in lookingan-nalako69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5584719c584b5346c47fdc1fbfe9d217d2b84c96f94052622c498793979714e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164477 Malicious code in polymera-manuyat-mudniosps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02cbea01a8aadec1e3fb71e51e1f3d8fc7c8b7999d031017dc000d18cfdfa189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158537 Malicious code in lookingan-namakiki28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d3bf05eb4fdaa32134dcd74d99d37a0c98ed39f0b531c4b9ae1899b7c66fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150836 Malicious code in @miptaa02/miqwasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fbc12d1f0743f273d33d0bd9ee7701e4eea8e0fb1deea5dd7c64e194b98611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162367 Malicious code in nokire-arhani53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d0e9f3039e88cb4573095c964050ec284d2fca3461dd03707f9adc585239c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153151 Malicious code in avminah-fagis-fofyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9743fd71574176835d966dd9a0f971b51148e55a2c1cdd754eea47673357f125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167065 Malicious code in teagood-lokina95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb22f14f478f791abe52a15b56beffcccaa45c9128f5600fa0bb805092a5fd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152115 Malicious code in aji-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector babe48fcefc989db5d5bead361044609698799c441bffe048b24a1fb23a0288f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153335 Malicious code in avminh-afai-foaaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf404dbe9e0a772e4fec6bc46e7b15cfb2161b598d3099f91062a0bb566a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150978 Malicious code in @miptaa02/tia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65eebe337cb428e149392633fb48c56118a4facdefc04c7cb3c0fcf132052c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162434 Malicious code in nokire-arjuna23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d9d16502ed2c8f1515ef2bbbbf390ed549b35ed2174c8d1b4e9a5cc1ca0173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156137 Malicious code in ilal-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3879a7ae0c9bb9c958338d0d8f036510b47e73f43cb96c6bc4f3c0b950ef1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169614 Malicious code in uarug-miafuai-suatafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5afcd8095c71cd8cec871cab93d0d70450e8c4aa50d69ebbee1315471bdefb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165047 Malicious code in rival-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da03511e217c945a1d6b37423ed89efbe84e99d400f8bcbdc64854d246dec5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164471 Malicious code in polymera-manuyat-butyaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5668ccc6b69de9135a9401444c49d801082be42afff00d9f08c88500791f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168684 Malicious code in tealove-reborn10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9885ef2f105824a42017370643abc975e091a848f336ff8eb9e51116fc9095f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165907 Malicious code in shilang-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f07d33b3526a8296c1eee53115bad20f150d01eb9dbc19a855c7b6a8ccbff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154891 Malicious code in fadila-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d986b3ef44d955d6ab063251509cf6c2850e32f4adf7b9f3c55fe7ac33f5d10c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155527 Malicious code in gurs-masak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e24873be01fa2c49be30696a4552f99c892a9711f975b17bb2d62c1428ca47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152962 Malicious code in astia-alaki-malifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1feac511381fad025b4038fbc85353f4406c0f69445f49298c9f845a0fbf487b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...