MAL-2025-164302 Malicious code in pitra-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7c2fe689d22727443013fdad01ed5a6a92c9559e75cb675fb52d7d9a5266a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159231 Malicious code in makan-aiuga-uyokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6cc3c974a978c6a853b16a0cd6915a605bf3ca2929ca60a0f75ed8a12f7281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170239 Malicious code in uyifiuza-iytadut-darina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546891f9cd922eb8e73add745e9a91a5d22365b1f0cd1ec1225b700558fa554a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157626 Malicious code in keyla-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea60a81b2202c493bda0693c8b9de9a403af68a379079d3a742b116655f357a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160414 Malicious code in miftaiky-there-eye (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb3119aac38564f8b3a0326714d46e658bb5c5f45ecc046c3b885a01e3199fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150639 Malicious code in @miptaa02/fhdfp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cc340a6c8d221bfa3286e863305246b2543ae2ae00a7653488e63d1d46f303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150738 Malicious code in @miptaa02/imb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 119108ab6a63eabd17dc81dd058b69fcb3aa67fecad84207c8eaa1517e3b3de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151507 Malicious code in abiuna-mobialue-amasioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75cda44d055e1a0b2100c73fab43aff38a3d462d4fb16537d8439c4154e11e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153680 Malicious code in billa-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e262086b55578ac298b18c1228aa197dc51a3760eeb72020a4dc5615bfe140d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153046 Malicious code in avminah-afifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab8c71acb867eaff67cbc8ba35c08317c6253e42a2e821e7a9e007d8b93973e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159303 Malicious code in manadi-scaiasor-dara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76dfcde1d11a0e478238fc057c1de3f92c6639c597db2ab437a8e29928e86fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156891 Malicious code in irashi-2aa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea4306e8c518625590928f49ee35475a775bde8850db9021a7ccf7f216113e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163805 Malicious code in nudela-ofgaf-gagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb206e957a02ae82f8e043cb27f0d5cddd775dc2f7d26dae891ec0adbd583757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157952 Malicious code in lala-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6670a4f4756894ec5f7c2e3fcff041ca1a8d09637372a703fe97061ca2469712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157376 Malicious code in kamasada-nuyata-bud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c623a564553056dd73032528b52a7f4eb5ba5d52f243a015ff9fcf55e3d45740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150801 Malicious code in @miptaa02/kmy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e65af9cf7d50c3942bdac7500c2ffde644dad584adb2b5a0542d316454c6dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170265 Malicious code in verify-aikn-misualabaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83af1987267f371b35bf3102ced7dea18d065f7fa4af17335bbe4264949fb09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159331 Malicious code in manadi-scavior-addo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d5d1b41b240f72f0a01a2b60da4e81e490808ecd8f2a5f73aae70e146e96bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152653 Malicious code in andriani-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d993b8563e79fd7546423d26ea639c9f4178eda8d1d88bea9742a765045c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161260 Malicious code in nabila-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b69ac9385c207abf88b41cd737a93931395086a4074587717746cc5c22bc42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...