MAL-2025-155991 Malicious code in icha-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0638eae12e41420169d6576544c156da73d1ed0513d74848c5f6008ebd8ee15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166051 Malicious code in slamet-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd530283b53c3b2b9281bf054fe3c16f583153d97adb73533c024b54bdf9284d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155123 Malicious code in fitra-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d6895f1e826bb9bbbc4043b2c83786c2be92b105f996a7988fbba3d6b625fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161921 Malicious code in nasrul-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d807f70b00cd76eb796275131be1e8ebd47a0a53e1fb245c47881b00497134fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169339 Malicious code in turisna-gd-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 762ecda3aae96f19460a80dbde5faae964bb1b3b9aaf86b24eb1512fe650ae4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154607 Malicious code in dian-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52e4811d91e24eae0a78ff4a7fdd2e608ec6c5e7889a35b638bc1251025d9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170567 Malicious code in wulan-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1828c7deb7052b462d40f215c37986337b092da617d2d27202fac87b5362f90a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155798 Malicious code in huda-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3438999d078904b4caf40e3aee505956bb7d3226bd454b4592b33fc6178a8099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149960 Malicious code in @mipta1/asju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab876f8b4e96e5fe8d52779845a9580ddb3deba547091ef39c77d37114e30f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159473 Malicious code in manadsi-sor-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21d96b632fcb3ce25b2e4c9aff23deb1a4aded3d171cee531b46eab1228dc12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164139 Malicious code in pilka-kalimasa-vubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4d3225f28e96f2e07ce90301f5547471e1aa2eddf488ba96f6a6c21746b0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155528 Malicious code in gurs-masako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e375f0616908f780419541428f23ec6af02a5c6c0ee4ed424f904c6dd34464f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158466 Malicious code in lookingan-nalako55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e90a43139c6813eebe2ad6da8adb1562b12f317515738c77a217af76319f366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160044 Malicious code in manurung-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118e93e05759099e68da5911a4b73a4605dc085e3b554870dbd0c6b061af11b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150773 Malicious code in @miptaa02/ivdak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8586876996a948ca7c40cef0889ad33c295fd424e11121ef376d188220d5dfc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165986 Malicious code in siregar-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e682f28b127728070c714f99a4bf040c670a8f5e28520711ed5aa6255570f30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168534 Malicious code in tealove-nice8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3d540d19bd0af624cdfd92fe9e50ccb498e27d2dfb39996c40812a624e0b86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163701 Malicious code in nudela-aaaf-gaafodfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cf915e617fc45d0166f9d289da55dca38c478e519bd959925906341d2c39e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152845 Malicious code in aril-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd4c8ba10c8feea0039ba6d825c92cd0900e8ab7a6f8639379550e10c929a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164507 Malicious code in prayoga-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66433056fc6cefc4210507a872e4dfe486cee61f1bbbb61081561edef17e30d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...