MAL-2025-156028 Malicious code in icha-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2a8fb38af5898ed4d194f72a8e4dcdc18a741b967e500859e7636116878e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153233 Malicious code in avminah-fagnias-iofagigag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebf8d91a006dcbd536acba2bdddde69cd50728fd5112126d3ec6614701d1de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167449 Malicious code in teagood-nalikami49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebc0b7bbac0fc873a4f73db52b1ed9f35cec636964862586f26386fe03c8fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158051 Malicious code in layla-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f247f0c81323421a23fcb023d96a9763b1ce0db9fc7246158368368fdaf88c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152942 Malicious code in astia-alabki-maloloikaiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189e8d25f83537c65fa518a905277f19a4b2a31fb9e132d4a875458659e980c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159547 Malicious code in manaf-yuaki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff16c986e8331211f16f587462c753caedb15998aa38b48b1ada13da0c27016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163019 Malicious code in nokire-nakala64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe2e280adaeb7bbf500ba134027686869643fb2f89228b39880ef1c16ef2343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161103 Malicious code in mutaus-mansis-saintrasse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0209d4be26ceffd1af95e05bddd2f061893c51c4b0206b50d9db31718737d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160601 Malicious code in modirai-fiaha-jinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf2c359848eba35c75be168976eb3997cc4817da7a138c362cc75b8ae80f85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157932 Malicious code in lala-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6825d0d062114af2abf7c5c5c333d9a329b06d67585c182612084204a01f8b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163732 Malicious code in nudela-afogshaf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be3b8361362527e379b83ce7406940345b39edf795c4ba81bb0e05283302db6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161995 Malicious code in nasution-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a788a1b7242d13b4751134e2bf628cb53635063d49c01129c44994d413d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152102 Malicious code in aji-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab5b2a554856521c26a23ffb4e2ca908042fa5298847659029d48d8e543524c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165779 Malicious code in sau-naki-upsidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9be09352ba5ee088006c9e1c5629ebb211848cd8cd80ebb2e432348db81877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159728 Malicious code in mansia-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9d9a2786d81f73bca3fdae863751f572cfe334b619c01ab9871a593f52b677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158192 Malicious code in lintang-tea33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09291a8b5ac51d5820bd33c300e9a0718ad24f9ad283359abeb4d7c694d99d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163176 Malicious code in nokire-nana24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55fab8903f864e94d3faace2bd922543bb3c90162a6ac15eac1da781a78be1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159902 Malicious code in mansioda-noda-mufngu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25af94d03f91c60dd510c099cce6300e6f3dc0aac9c11b05961a23f3eb46e322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150022 Malicious code in @mipta1/ffsusid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48aa7ea91785ccbdb53d0f39fcedc3342f0a613fbe02be3eb5c93b75360bab51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153502 Malicious code in avomainah-fragas-ofafuaffau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548f1600d0bc2c584ecd545d21ac2e8c7710472ac24ca8d97e88aa3dd08edb31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...