MAL-2025-160483 Malicious code in miracle-dibook-ikalaiku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210482db635d1dd0ed5039c49664a5b767a36e9f42eb0de638468295e9bd1003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160422 Malicious code in milaoa-duio-nsastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1968ab37cd5bba579758d56cda8a2a10e9ce2b95e61034f9234761b8f417f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170219 Malicious code in uyaudtu-tayut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe7e54b0976baa41bbf85fe42c0fdbeea5309eb6cdbd134c6ab41a311383f3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154362 Malicious code in diago-kamli-luaquak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6650b83e4ceac1bbf43f56a9d58e4c349c28136b84d10760f42c96b898cb708d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163775 Malicious code in nudela-gagagg0hf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ddebfce82ff997473f97916c70ef1ea5744c9435bbdacdbbffb269f12368797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150066 Malicious code in @mipta1/isux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93071b16f1a1cf6385dabe20f12b8b2dd5cc29dfcbc633e99be55a3614482d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152011 Malicious code in air-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df27176e4154205d48707cf6d9102323d3f4797067042ba5a1d96f7f9092c14b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168682 Malicious code in tealove-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cc14b32eab3255279f9a3f8f25eeb4f9bb557fe669c542799bfedc22849e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151277 Malicious code in abiba-avi-aumaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebd5e8bbd6a8ce6bde9ac8fe0f0ca7e8096159ac8252002632ec66fe87c77ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157479 Malicious code in kapvino-sifagima-fagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c86d6aba6b37871f993a75a2f7b3401c5f99b03df88c55e195229e3a61a3943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155876 Malicious code in ican-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da1f4885696f0289cf294560ad650f948f6077a1c608df07f1445658816f84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167768 Malicious code in teagood-sukuna16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c117790dd8acb6414aba2178815a785c8156e42bcda433708a7742248c54185b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155925 Malicious code in ican-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e3016bc6c2a26acf6c94ff385cc0549911e3c2267a95fcf6fc78afee8a9995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160812 Malicious code in muklis-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1178e3c0f3bd7ce4923406927a1543ce4a692fcdf9534db2891f8fc4a5c5709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160210 Malicious code in masiolan-ofi-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9984d4868c19007e9f8c07bff0e922895a1fd0577d23ea57fd7b4de9a843f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153909 Malicious code in buatf-buat-buatat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23112efa7805e89efd02dded81807571e6a2d7d1e46c3ad29919a82dfe6a26ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153152 Malicious code in avminah-fagis-foyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31242a47f2f85ddd0f8adab209f9a39aa19515ebbc600b2295903d8ad111d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154574 Malicious code in dian-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e08c1d99ed74aa75328d503f37de380a9574c8f56cbbb546b51657befcbfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150710 Malicious code in @miptaa02/gzsaody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9cfc2d66992fc260b3c5e71ff6f461fa25d2666cd90989cc2f5166b0b864fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153665 Malicious code in billa-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0785cc17957bc187c9b59dd34b7cff516c1cd0222618e29de555cf9e71b539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...