MAL-2025-159535 Malicious code in manaf-marzuksi-maja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42d22f4562f9f2d5f2e61e23ce0028b57021956e634ae6649cbbe965e2740b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157973 Malicious code in lala-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ad22d6a80bba9273128fe6fc34c36a01ac1ad9eb77d3594136cf46574789a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150633 Malicious code in @miptaa02/fgob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12680415c25292eb2aeeb80f67b51ed3de21eb896f56a28f9bc0599c8228fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167705 Malicious code in teagood-namakai5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d267447e9033e8e064adbaf6504a2585d5f20afe7cbe07c76fc1b26e03cd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152740 Malicious code in arif-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2980187de3d82e6854c3de299e40f7a295814897367324aa2afe1c9d5c404bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152558 Malicious code in alvito-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5812b45c52d2b1e935a4df001c1ba19410cc875ee7850ed4a2ceb0555d624b51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161012 Malicious code in musasiak-nai-fatcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e491f50176da8ed8cadd861c65f1794b7e1589a035d262d8572fdccde88d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161224 Malicious code in nabila-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb613744a04b55d2b3ab9a72175bfd7eebb5d091e9e07b49a53a5bddac70bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169919 Malicious code in uinsu-losit-dulaiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e837dd84eeb6e7e0e65cb08d855ea99e60b4a4a1b3ff40031f38043b52f9cd2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161277 Malicious code in nabila-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 240a49610b358214de35a97abe83df42d7d264c6d0336c52636d89deedacf33e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157663 Malicious code in keyla-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bda63db49efe3a6763560ca6894dedcf027825072ea08388c3380b6f88b7a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170435 Malicious code in verify-tac-mal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec73bae3e808f022b9d261c25af4579726fdd69d17c4060e05965ee577382f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158376 Malicious code in lookingan-nakomi19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288128309101100e8c5a88d3279a31419406092b6e7803288c936f330d810d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152620 Malicious code in analsia-akifai-asluia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76103b84f4ccacb65f3b09815e2423e2665289388c718d04aa24b6064457d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158633 Malicious code in lookingan-namakita24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a9fbc7262d1dfe2ba184c9bebee76bc6ca8b9b6ba1690d0dcd7bb35386f3478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166316 Malicious code in sunden-dibok-inumliuiuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160f3410cdc742364fa5e4b1f1e2f4f69191c37b526b3e81017bbeb72daf7cf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159508 Malicious code in manaf-asin-nabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc35fff61c99e8abf1a65f98e556989812b612cdeef6d8102c1da991e6cbb4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169714 Malicious code in uinsnu-lkumi-kunal1aniakab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d4dd5db230c0bb551dc1b145490cab95de06f3e124121fdd7c21cb0024a0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165452 Malicious code in sabua-muyaig-bafufima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61cdb63f47ec05cfe9780b1e1856042af52829fbf14194fc706dfb815ea088b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158659 Malicious code in lookingan-namakita48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7372e719c0f9b790c7e0ed1742a0c237f922819535bde2876f5425be475ad283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...