MAL-2025-155465 Malicious code in guras-tuya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efea36c11ffe8afe5ff4001cc8170cb130691437181e6256587c891190ab3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162867 Malicious code in nokire-loklok16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50515c04bd512a225facc37076bca95b9c98b31c12b860c62d0e3df9091a6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157621 Malicious code in keyla-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f3f791359f4cfae22d7aa0a844b686dbf1ab802111ebec15be6d18fd4bb7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156401 Malicious code in inal-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 370e333360d1feb250712c19658b5cb570796039078d76d09dbfac12ec92bce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168870 Malicious code in technical-alin-tubuknanal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819bc5200c3a25a46f8bba95d63aa24c5a66763b2e399fac59630fbe8235ae59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154126 Malicious code in cinta-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324576aec23b642db0ee20dab12a0cb1e31e8ba56b79995675b47cea5ce8a6df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167505 Malicious code in teagood-nalikoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb737652723502174cb5b369e025ed03560246004350dbffaa876cc4e771e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165862 Malicious code in shilang-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028d2d4e8d17499c177ea37e854fa981f336bd4e4b9150244fde30a2acc42ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151097 Malicious code in abang-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97413bded9c81f5de8cd8e493392b08d2ea76fd435cd0c6909df3a729dde67ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164648 Malicious code in rino-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9ba065579479e80605babb0de074d9f6ce469fab8ef26d337ed5c74a1705b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150400 Malicious code in @mipta19/pjpr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0794131e45a52ec290eb94a28f02802fde3e7a2163c28e19a4442de0f35d2bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169136 Malicious code in toyota-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f533b447942f09876718e53b392b4bcdae109595f4cd3c892ae40efb2f87ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164384 Malicious code in polil-akilamu-kiuni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765c2b25f0dbcd52ce103b2e9fe73c318e6af9e06c2eb179031840c863088be1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155503 Malicious code in gurs-abtdya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739ca6159a7ae2d86dceee0115d6435233f75afd355f1462020f4d5a13282410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157452 Malicious code in kapvino-saa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a58a17ba251e8cc69213f65a958c1aba9c0eb01185a8149ca18912a48e88e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152732 Malicious code in arif-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8679dc26d05f3219fee03d011f4fcc05561a6b7adfee8c0f2731ecdceef5c18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170428 Malicious code in verify-aysali-anais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ef91abcd8e6b43d0ec53add1ef7283c8abcbbb32bdeecbacd074d91c353a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153084 Malicious code in avminah-fagias-dfigika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81458851c68c153f8a2b2d085ba584aaad4c1ff9f96a2851e53b9a398fd15b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157607 Malicious code in keyla-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c04d2dce27baf650b45ab6bb757954893aa4d06f0c6494cdaa1b2a8d407298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164877 Malicious code in riomda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a128a1e9e9661bf5fe13b12740eeac904f8fea27a9662663aa47b463d22a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...