MAL-2025-168879 Malicious code in technical-aln-tuunal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d6f59ff214f1f60bb3182cca209f8b6f470afc62d729aeed94594434d7d63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166316 Malicious code in sunden-dibok-inumliuiuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160f3410cdc742364fa5e4b1f1e2f4f69191c37b526b3e81017bbeb72daf7cf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168116 Malicious code in tealove-boy11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80fa2c450236ffaeeff264fe795be4f679b02daaaabbb98221deb345ad21379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156346 Malicious code in inagi-vumaf-nagafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795d3057af2228ac9e20ad7f5b50d5eeb58716e75966f13009634b02024bfcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162406 Malicious code in nokire-arhani89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a3874c3d51d9505774da893656fb00cacc5c30d388fa9cde364bce21e9ffb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157530 Malicious code in kentung-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5edf356c7774f05a5d79b7073c8e5ed781eceede2586341ba9e7588c4bdc9896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170148 Malicious code in upilka-luzimub-ilnoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5701088c0f2b8d0042c8a514cf6c690848d69635237291be617604412aec27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150239 Malicious code in @mipta1/sfapasr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ec5e306c400f3294998da7ec6ad1cf06f84fa42b84b11c1c8ec130f3515e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165879 Malicious code in shilang-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1021d19030761c915ab15a6177000a4d5547b3d27961a268d49bbe4d86b98d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155829 Malicious code in huda-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4ac9daab98485bbf1d00e99f5ec827f9c5af3f603adb8afce0f86760cb56f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169050 Malicious code in tehah-nuya-buyada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb848bdee39ff11789d193a944e16c14b36b6ae3803846a747c6e385815224fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168505 Malicious code in tealove-nice27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17c1a53a169fee39e5f983e7f443849c1c539eb6e12b6b7144ba8ff23c72da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157553 Malicious code in kentung-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63034ae505aa86d47357a1c5b87ff0fc17346b8f82b661062cc63e99cb4980d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158180 Malicious code in lintang-tea22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b61b21dd0d8533a604392eb4d33875dc30617eaa4525aeed614d02b8a27cdab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164246 Malicious code in piluka-kaiamlbu-kiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ae53d41012272d15cd524abdee23f3500981f3a6161440767c0d8da623a318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163625 Malicious code in nokire-zenitsu37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 043d40d36c3a902137142055107c70aa10c3be58a536ce71cb35f1a6ca876440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155814 Malicious code in huda-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a9810a0df7b7e8bb3657590fc0367f090c9eb62d4f28bc4a27eb2419d4eb4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151013 Malicious code in @miptaa02/weaddd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc322c8d24bb785b79bab067052c9eb16025ab2f171ff58c361be32f9017a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158705 Malicious code in lookingan-namakita89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb500741c8a22743a7072be6bb6f139fac08b0924af5899c144312d01814294d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170027 Malicious code in uinsu-loti-nalasaubibaalui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6526520966a736ac1b6de55cf8a80932de01151ab1edc2fb20f6eaf0cee1a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...