MAL-2025-161105 Malicious code in mutaus-mansis-saints (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1facdacc90068c57971d5a4911a8c2bf0be7b9a0af4da8254a52a1ac0e4df56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154825 Malicious code in ewa-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d916e5e606fe163704b45120d764cbdf6a50f0b2e73477f37b414bb2e5441160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169112 Malicious code in tehsdnah-muaido-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8975e62180a404417e4d7fe0d8d61e9de69b8a16b558973531af6ff935341fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166905 Malicious code in teagood-lokika40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2865d9808951cf8eb88739265e89493b2f8c89c8606e0f86b0d973aa56d9fb12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152869 Malicious code in aril-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd3a8a5a2c2a554ebf7715e600fefe73d812a122e7753a7ddd9070e4d6a99ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166662 Malicious code in tadasdhi-ert-masui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e29205716a8c68cced536ac78337c1cc57d16f05758c72641f4240df8ea9cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154003 Malicious code in cara-bsunssns-jsaunso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56d47883e30052be89fa5680ae70bf24f896c70745d772cd215e6e345c0409d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162494 Malicious code in nokire-genji1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae842fc9b6a585ed46ec83bcd3fc4c42514b6af3665ee1409d6f148185a6e267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153941 Malicious code in bufpani-mau-nmafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8acd7280a499bfdeaab658d456d94962bc84d5bbc35d0b78ba27fab1ba1a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157949 Malicious code in lala-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e95d61945586d332384e7d4fb844461f13a6a42fef83208aded48bff811d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157836 Malicious code in kuinsu-uyillu-vilanauavnakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6234c4f275873c1fdedbb171995db4e845ad9868ff31e01a92e156f6b4ed77b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151238 Malicious code in abiba-alufuai-ayvaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0552ed2bdda8f99bf243d37acd7bab259314a109bd7b6b4bdb0fd392f88f8ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168578 Malicious code in tealove-nokire49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25967589ed7c4a4d83aa70d96325fd9354379ff50e27c94927906529dee7614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169636 Malicious code in ucok-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae8a31c425a95d148a0cb661d598cbcbefc4d6b4af9fcb2dc7ecd40af732079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162079 Malicious code in nokiragne-afa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b15418f05455b97c136386b6084dcc5e7f5b8763b3d91b5043488be5e04c014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150470 Malicious code in @mipta19/ytddhjhsus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d9d3a910c3143471ad514a15f5b11f27ce1d0f1c73d112e6ebb9da8434226c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150499 Malicious code in @miptaa02/anatashoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6404faea254173e69c8917b6629a1c1284f06da128de99273ce304aa0566186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165026 Malicious code in rival-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d00ef1e53e1eb6f32406fbb7ca40958887a2685bf8da58eec7746d676d215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163387 Malicious code in nokire-rara93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd62a6295ce794735ae8e4f4d5134ae3331333d89c1b2ab11a6df8fd867d171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163787 Malicious code in nudela-ggagf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad7962aadd603fc2e17926c04033c48047932b6c70d884bc8e5dd3993a17d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...