MAL-2025-169988 Malicious code in uinsu-lotaihmi-kamlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c934e13aed984d4044c3050a1764d2a644fd7fdd1bb153225ef46986af546434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162802 Malicious code in nokire-lokcek47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 872803af115fa43448205f76dc6e7f72e7bf4e69c65f2e5452d61042eb7e7268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150757 Malicious code in @miptaa02/isafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6294ee378c5ac6737b27adc786c96eee83eac7a52aaa21bd0d996854d478e12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163274 Malicious code in nokire-nanali22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3fa430ba7e44f5fd7f75b44e2296dbe9cc67eeacb157f13b5cd95f00758c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158122 Malicious code in lina-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79ba5eadfb5f67a225ce166df30d855e3cfdab1edc8f08139a6573004285c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159166 Malicious code in makaimaigan-aniga-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d019f4c775d777d3a4a33b6d739f44360aa9c86558da6ae66e36fc299e571648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169420 Malicious code in tusya-fsd-sdeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d35707f319d4e868c1784aea282d809c4b8faa899fd399c34c523da73947b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150204 Malicious code in @mipta1/sarasas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3e642c6ce2d290c8bb3c2cedc2ae212f99136be0a45b3539198735557dc864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164823 Malicious code in rinto-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75e24162ec5f98e1bb829ed130945a01c729ed6935e005f86a7c11bb3fd97c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152385 Malicious code in alita-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435ad6cc082b751c5fb308b52b8394457018a47a3ac55d72999168ac5d088a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161688 Malicious code in nabuf-otomian-daju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a016a08d7a674076314810ba64fdcfe05a13bed8ff35f86dba9cb3c3edd7604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166404 Malicious code in sunderlan-ud-vaimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ea509e61fd8481f69bff8732fb37db5d957cf4c38b43be615cadb3e421bcc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166236 Malicious code in sunde-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8070c6b8314aacefa699b02e78ba068a39610aebc957af734fa5b78991cca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a82461791b3d3c283ee8b51aea8d43be5303f6ec9b2aaab4108b5b6275a90de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyud-vamuanmuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326afedae9cbb3acc9b828f616183216e859e46b76a4f4bef2e4a7ad95910a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/loisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d464c7df50dd2e0b9d07fb864939e7eda575043e7fc8791e7b6e0c2babea6672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b8904871b495a9483ae0d914a4ba8af11e1298958028666f40b8ed770f1e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safadia-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b493f74dcb9c3fdb730c73ac03c1424b7c863470f9ca8a180179a3b1ba3d54e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e41b4a32937d74aeb7f41c6fc1eec985af8c2bd17311ebea29f576710731aae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd9b3b3c9f83445e49964c064ff7b02c3dc56ff17d81464e5ae6ebeec7a0e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...