MAL-2025-152415 Malicious code in alvino-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e381a65f313a11d1f5947e298ea8fe51f7f232de39bbedd9b243f28706514369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159316 Malicious code in manadi-scaisor-dadfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06dd983a67da0bd5d05b166289dfd979dc166237c694dbac079f73e36b324c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162625 Malicious code in nokire-kilua37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c950df11ab4f279574d1fc171e75e1f32444a575e67ac31576bb1c27421328f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150235 Malicious code in @mipta1/sfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9015dd145c0e5984e60d45838f54a03ed61750e4279cc89b91df76900c834c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164128 Malicious code in pilka-kalima-biucb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bad5c4994b760d21df280a0a16280a64dff45335b765eea750b666ef7a4dc603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154385 Malicious code in diago-kamoi-liumaoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922c0bac4a15adb596e126fc42a78e8706b13de16b19d13423b2dda36b3a9afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170515 Malicious code in verify-ticaul-bisuaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c457073b746fcfb8ab2d562c1e811e21c63f686d9d663d182c4827ba70212a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayisali-gufalanais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d60b4a4035ebd00b7c58c79e4b49337bbfc24e59a390ad5104d260f5defc6a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toavila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2513a1b41bf9b842641d05bf1e46109922ecd20b02a234e53a4c3a7521ab6577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151657 Malicious code in abyikula-nionai-lausukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ccb71f6fd335e58f1618de6ae019fba0595b0e3ec54ee6562ba6c9446c68877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157417 Malicious code in kapafovgiaanggapfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20667d2f5e0efd514d3285d4ce86b985bd703b5c5c38cf474c40ae6a595227ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169488 Malicious code in uaragia-mudifafa-sayugauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5024220896ede674d7d82dd38f7c5149d6107d6aa9fbfc692f20f642e766e30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160665 Malicious code in modirai-igno-jiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bad3b3d0adea6e332e165538acfc96b7a4063701925f41639b502db4d327760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152794 Malicious code in arif-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935c9e4e014ee861b4881bbd15ed8b446122bd17e972497e9899f97630519750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159927 Malicious code in manttu-muape-butda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3e6dc59efeeeb2b34fd62fb089ba105a7231b8e6b3d151d44752388e35f2c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169135 Malicious code in toyota-cir15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39220b9136fde5c10b22612b256147f53e211ae4877504b049953b779831efb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158248 Malicious code in lintang-tea84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8889aae0a2cb692b7b5d133ab7dc867fd8e94b96315e837f75340ea78b9edf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150352 Malicious code in @mipta19/asisdssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1783219614069c28f8c72a17683c2ba5b1ecb9b6f6c52689a00dc0574aca7b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165955 Malicious code in siregar-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d960c87d258e85c0a39f477e9f56d5a1599109df67dcc13c1bc746f8d4c885e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157090 Malicious code in jimmy-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e97b2981e154e5f990b685955bbb9a278d6603af87798f114e0c80ea69e7d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...