MAL-2025-157442 Malicious code in kapai-safoamaa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4178dc93056e9cfe33f1cd83634290b4c19f7b708dbb07dd614404a569738bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159465 Malicious code in manadsi-sfdada-mva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7483bc55a6eae1afaef0034d308c495e6e72142a6cea427e389b2a35e928dd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165123 Malicious code in riyanto-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3a8c488566dea543440f631f560d6f0a47563b00e90cf9d2a458c350beb09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154605 Malicious code in dian-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5cd3e314f699d6d3b04324a896998cdeffe83cfd404917bbf22171eea1b123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169771 Malicious code in uinsnu-lotipmi-killneauar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be97d98fe2def760bae06ee172fbf36825ecb649d793ad6a244f2214fab604f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157563 Malicious code in kentung-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7879f247630cd4bc0549103b346a90471004b8cf82335629f6e9bfe6f5cf4b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154530 Malicious code in dian-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a75c83c3612973dccefb90c21e944de2cc43e6c5a4453eaf38107ab3d35b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159521 Malicious code in manaf-manta-nurtasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304ca8e1df37a438f177600cdb79ad827757e13146019fbf3ebbdc5dcdf93fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153000 Malicious code in auyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e90d23f5bbbf7df834aa109a4660c5d2bde19e821253cc869e49d3f62437ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164670 Malicious code in rino-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317b40144f0f03807c853bc50fdbfc9497d0e8c09caec5c07a77efbbf15e0125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150550 Malicious code in @miptaa02/beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14660dc6c92af2dfdc613449100a77e989ef02d0b8298116a0dc672b0c75375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167291 Malicious code in teagood-nakamala28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78818c1881648df9e91b95ffca2e10312b99632a7c9c9581f3b953ec519f4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168374 Malicious code in tealove-naiman35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa342a38403f6cbd3ad00dc31b262e929a31760485a16e2918cefd1c540f8bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158058 Malicious code in layla-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e2e6f969ad1b968f6de30d4235077e2ecd23c20904ea1dc6124979550dda49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153872 Malicious code in bitha-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79920f17e17991b4378fc2230bc9cf83ce72833566355b1b3610fce86620fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161011 Malicious code in musasiak-na-fatcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6b1103598ede4777f45089ef2379e2a7cd03a7100fc4720755df5ac7f17be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162264 Malicious code in nokire-akaza50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a411c3754dce266092a2825703fdc87b7664c9bdfbc2ede6fe7408a1b1485c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169921 Malicious code in uinsu-losit-dulaikau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b16af59b44acaa1355c5e138dec118308d25f9bd281ff513c7bdf5e2bd2c3bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152484 Malicious code in alvira-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 810610c0f6c7570e320472cb52d22105184b357fd90a0b71b6873c5a31974831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151327 Malicious code in abih-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920f5c857c813f3f7520a32d83eeab4d73b47a52873c64601f6eb9b81d1b4e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...