MAL-2025-159619 Malicious code in manda-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af83be92a4d78539a7b8b449ac1e8611de2926a3f0bc712b25a06a749ca5054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159322 Malicious code in manadi-scaisor-darimana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17ccd98460ff95b5193d5c3117e7c3c0b38e68c0a38128aa637af7a57b05e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153062 Malicious code in avminah-fagiaas-figfomka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d4595edcef9cec132e3bfb863d563865e4370b0c69b67c2ea89a7d09ecbdc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168685 Malicious code in tealove-reborn11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cdbfa8632098690a88cfc502dfdce33d38404ca150b84dcb79b31c0a1254cdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166119 Malicious code in slamet-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689d5b09aa9abc73e5e2b79a287dfd4f7997189de6fd665ba2d145da95318c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161450 Malicious code in nabuf-otimmn-affsaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 382638fb1421926a4b762bd771746ef891ec124dfa07757481fcf9ed2d063c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169507 Malicious code in uaragifa-afat-usafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80ddd19538780ac039827313fe96c7226100d842a5e6cd039b4287563e1edb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168317 Malicious code in tealove-lady12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fb49ac5625deb0a82c15c796fa2a482b19862dd9f2a1f7c50441a99db4429fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156028 Malicious code in icha-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2a8fb38af5898ed4d194f72a8e4dcdc18a741b967e500859e7636116878e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154012 Malicious code in cara-reti-ajsausnsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9920cc8b3e14929c9172f29e323fb87100dd4184231e054fcae9281a9cf983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164812 Malicious code in rinto-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a761cb79739313d16863a8d5b680db3a63bedec64e2219d84f3c5030ba31b5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165115 Malicious code in riyanto-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff9c68171fde0840d317e415ddc806975f43d3922e041dc79855e28fe2a88b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155888 Malicious code in ican-poke111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba5e6bc2940cf0bfb98ab476856c303351e0381a6943a1444e0064aa48a279f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166939 Malicious code in teagood-lokika71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb7e5e7a7e204607a169336b523d9260b4ae206cca997b0bd3179d9d618f345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163907 Malicious code in nustar-miuyu-nutyufafian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d415aee5f3b89f42d1b909ab338eb85eec77f312686d4469263380cb0b18fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166177 Malicious code in suharta-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af6392c8809b58625749a8cd6f3df32a7ec09b9604d269e9310ed64ef97fd95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151839 Malicious code in aiboa-moilopie-aro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d80ff7e8c27dd087c59ddc24c8d2259091855def2fa64d3e1c1b13560a6af99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163347 Malicious code in nokire-rara57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf8f0beca1ffebf9923357376989e012febbdf3d19e86080a75895ea613b82a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157610 Malicious code in keyla-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6c55fd6c9a4c52c0649738fd61e960c75a8859b7590c3241588e48a8c9b00d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164706 Malicious code in rino-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd471e0242100d422dd71cd6cbdcdfdc7f5e1bfb15db879676baa5a2a98532bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...