MAL-2025-159641 Malicious code in manda-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f876fdc2e089164147dd6a8ae7ad7583e32a642265fd6daa7d9cc3a84ea6fabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165119 Malicious code in riyanto-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da717e9979e11418410a73828d979d705b1045a0b450cce9f9528d6a652ccf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161902 Malicious code in nasrul-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbeb37af36e977c0dcf75a3373cfddaf3f444fcc1b98b55ecd26413d484788c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169407 Malicious code in tusaya-reff-sdeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6ed70f4f576eeb8a17ff8391b82f83718b10d3c651648a2c184e28962a17f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165546 Malicious code in sabuli-nali-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ac507ade7b8851e375af387f7e6dfa8270063e4f0c540096cd48e964d920559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159226 Malicious code in makan-aiuga-uyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f5010e42c1a545a16f7b41a33d69d485ee8d831f9db1589c98fa1bd1274045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157698 Malicious code in kuinsnu-lkui-kagbdsasodgsdfdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72121e8a39c2a7035018934f3873754617782ccaa763448d09d763a26bcc353b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166025 Malicious code in slamet-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77faa24731eaee1e69ba3896120b1a294748234483f4481709b8b4b81f2b572c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164737 Malicious code in rino-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8fe8bb376758ea2002bf6296a5694d5208abf46a62a537d233a7cf30637e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150529 Malicious code in @miptaa02/ashae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de19c0ffde793f6080a896c921ef99c4496996ae450f774d855ba7540b18e32b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155208 Malicious code in fitrok-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1be60373352517339b6e271b426278e12be48d26849792f2320e658acc84fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158839 Malicious code in lookingan-namalaka29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 407b8c278f4c952d9ba7634b375b6f72632f1dc143c8c78a1c6d25b4933225ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165676 Malicious code in saku-au-idaduasasuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36777ca2c4664675e88f1d8261a8236d0bea01df7dc07d774a14011c2dc005a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167913 Malicious code in teagood-yakuna53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bed30494a9acddb6dfdd32041df4dfcaae155938b671ca9031ef75089d9b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167534 Malicious code in teagood-nalikoli124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6281141b323ef34de15143152d5ecf6185f8b035dc770c5e3e041184b3b2829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163750 Malicious code in nudela-ff-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29278d084534d03014b10719c2980bace598fd51b4dcf4c34c5ad58ac162481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157619 Malicious code in keyla-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16674821d954890d5fd5f661d33bcb8d4f7068b7588e9ae70ac02f2f07bbbf78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160863 Malicious code in munidr-nerf-nasuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1121d09d23f5cd586f7c6da4ee6efe24e77c4ad564803031af57c279e86cbd23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161749 Malicious code in namada-kasito-nutro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469707a92f7f1415f2443981bbca6e84654c69b89ffd5a5ca48f53879bf235e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164724 Malicious code in rino-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276248bb5afe305ce0caf5d5b58df3d374d1c3d6914ef9c317e89311e7db228f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...