MAL-2025-158428 Malicious code in lookingan-nalako20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f9227df2137f6177b8a5df6411194f7c7b3d6a627354a9425930a57f90c14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165186 Malicious code in riyanto-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ef12d9f04539f309810dc655b3a7c38c8c460b8dc37a057d96368b74d42eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166664 Malicious code in tadasdhi-ert-nabfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a662f16243abf6e6bf7ba977985761425d518c74e48388f6a6d73dc70aadb79f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166087 Malicious code in slamet-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dec3d41fb514ac6ea8a9ac3123d65caad1b27d4f23658766d9c6430e4ef148b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162570 Malicious code in nokire-genji78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272b60fe69b1646768dc9983e73323c7a2940d3240f57d59904f20e09bf8f4ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165907 Malicious code in shilang-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f07d33b3526a8296c1eee53115bad20f150d01eb9dbc19a855c7b6a8ccbff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169271 Malicious code in trevora-cir73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67e9ddb31e2bb9df058051d963b1e10959139180a3dc6720319c72e05861b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151921 Malicious code in aibona-moile-aromagiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76395dbbe03b589573d1bf7e01e446ec0b3fcc2385ba96e44fad1ca288889fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166267 Malicious code in sunden-diak-nulamakuiabian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c43311bbca29024c60026c32945a9c9890afa44cfc7f31ce6c2323b0aafb8717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160368 Malicious code in messi-turah-tungg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687fe1b7613c3396238683a02d5adf69570cbf62ff9cc71f3bd5dd2f4ff4c9a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164624 Malicious code in ramadan-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3766c81f1354c8e9f181916592faf7efa96dea8c1be277ffbc9637fad00b4f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161472 Malicious code in nabuf-otimn-g0afigaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c54d804010821462c60a09fe3691e23e3f64a2f2e39c9b698ac3d2b8063818b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153336 Malicious code in avminh-afai-foahog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19ae356489c87e5d3108ce78e979666c14bb15dde0da2ea78461594b59ec202a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160231 Malicious code in mattu-miop-nuaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7047d6cfa570f106c3f21df7299a58288a4e4c32362eee8d4dbc40cf8ea36bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165163 Malicious code in riyanto-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8015d2482597dd1d5f548389a984b095b3081dd5568dbca8be006b8e1c01b316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151002 Malicious code in @miptaa02/wag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89f1390bb10883d2a54ddb7447f4e64b025aad9b4e390a08661046c57b56efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166431 Malicious code in sunderlan-ud-vaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf9239b069853589fbe5cf749967369a03f08ffeff21de94fb7cdc3bf463af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153047 Malicious code in avminah-afiffsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5765700412a7a67fd7c0a869ce94c133f186cf9badc89ff60b70286fd78880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149922 Malicious code in @mipta1/ajsis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905395350e18305c2a0ca6bb1a7fb1e7e00f070bc6fa545eb72a0744efab3c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165906 Malicious code in shilang-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1876100ab7cf7fa2387e98b7b85f3642ee0387ffa6649e4ebb16706082fcef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...