MAL-2025-154123 Malicious code in cinta-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bad0cdc649769345341178fa6ed94c39b4b695946d31abc4b65b2149555be4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168829 Malicious code in technical-ain-itubail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3467491c7f09e4fa1e4fdb60a438320aa351e957348285632b9fdf7e2620930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155476 Malicious code in guras-visa-jap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528302afc9eee9ca29ef5519e69788fc42dc13c447e30399144b9b37dc53cfba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157777 Malicious code in kuinsu-lukoi-natib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d4539ba86a47ee9d7a730d1af414d2058a37582120db99b31d919e74a7ff81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155447 Malicious code in guras-nutra-nutapasap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c4b4901a9614c8eff97fb9a6aea7f5b145af30ff4f6b2befc2c4b88e2a2ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153529 Malicious code in avomainah-fragoias-ofu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a916627623ca9ed2cc64ce56948ff844b525b7017e9f942b3d55662219bf2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164664 Malicious code in rino-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8e43266ad5a7c55c18c8520c699f4fd9979bb949f4e8e1fc79c3b88fe0d8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158191 Malicious code in lintang-tea32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6861d767447a80f0f484c775f8fd8e6193b3bdbc0a8b0c70ac901b52f0c927f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152358 Malicious code in alita-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72eb915230558258e1e43ff3fe8772e19e47b0c7ec082650447781f5a55d3c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156329 Malicious code in inagi-vuma-nuag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf107e61f06ca715c7fe0f0750fbe5dac29fc483269dfd687e4ea0232d9d1083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165073 Malicious code in rival-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f5ef861422b300bd8f750afaf0fdc851658f12ec6b868f37889ab3833971f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161479 Malicious code in nabuf-otimon-g0aig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14622f17b58058a0be2513f3537d53a07a3d79536bf13ec52d0859dad9ffb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164449 Malicious code in polymer-indtffsi-addutfdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210d098e52363c8ed7495003de4048011b37e59f13a8b86ece48eedc16e6dbc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164747 Malicious code in rino-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0439168772c2786c7954b6ca39a211b74eeb233b73c554bd0b3d0cb4fd473e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152811 Malicious code in aril-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e6e9b6118beb9e4c25f6e0111d0b13e6836f98eefba7d91d8eee7e44cdc26e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168434 Malicious code in tealove-nameka8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a1e9b0763294ab2af13d599e5e1a2a489c329f2f31e519a14306865d8fd65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165868 Malicious code in shilang-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a335f9b0e97cb47f8f77f13534ec4071988c6ef25886af276ef34172e20e1ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158657 Malicious code in lookingan-namakita46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25db76881326d0374e09a4e2fdcd20968b679803285a8902ea9b78ed8e362695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164311 Malicious code in pitra-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7281f90aeef2f0fcd84bebd782cb2b5b782fc629098237b197933d1be95850d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168641 Malicious code in tealove-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fc08d3aaa5f15ea5d420b97b12e5fe846cd872bfefd4a0c55d83eb5fede26e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...