MAL-2025-161749 Malicious code in namada-kasito-nutro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469707a92f7f1415f2443981bbca6e84654c69b89ffd5a5ca48f53879bf235e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160142 Malicious code in masako-be-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398fe1098bde6f56dc07c7540c143ec5e544478a184bd8e068c6cbabf1eb461b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163936 Malicious code in oalgo-kiulasonlai-akiavabuiamako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d359563ccdd0bcc3a27e35c87d914237a4cd372647353f4ecebd5f84014726d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158970 Malicious code in madan-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed0076db9d3dd22b1423c0830bdebeee64665e1f0e798eb7c74c6ee2a4066caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155283 Malicious code in gifa-ot-uofipfuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95125abfba8f224e1c742d4869e0129aa826de52d8a84e23f681689333ec4d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156032 Malicious code in icha-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10baa66a2c7b0723052f7f44b80a18c6b1fc1a26cd3e6ecb956ee123187c1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168349 Malicious code in tealove-lady41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a23db394acaf2edb830ce973a27065f0b47f994267db095cae1d1a1e3b32a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152870 Malicious code in aril-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2147c6be0e3285f07cdd019df166d7b17341b3f4aa4af07782901aad8985e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167773 Malicious code in teagood-sukuna20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c2211a4ccdf4e4be28919ebc4179de0b215d5748643b84176529e9b0644216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156073 Malicious code in icha-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ae95005f7da448312efb9d977bab304f3428bfc92826a0e539bc92f3552003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165998 Malicious code in siregar-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276b48d0170e7d99712a2b4896f6803236a97fdc9157b80082151c48be636487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167300 Malicious code in teagood-nakamala36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9174fb1374b2aaeb0766ca855a888c185fb7eae9c2aed20e219719efa01ed61b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163086 Malicious code in nokire-namiresan34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25c69f71fcaf968f7f5a869b3105f22a63889c1d4fc89a49e2a9987b1029301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161033 Malicious code in musik-dai-normal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84d7f217f1a220c5c847305e500fc9e931f50a2590e24f41389dd9b148d530d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154689 Malicious code in dioago-kamoi-alasiasaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6b2ca3593afdc675467760668948c1ca4cff1520ed390e34eaf10b81acb7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169725 Malicious code in uinsnu-lotaihmi-klsimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5cd24748ef6189538d9c38a32f6464456407fe4a243d99ec264c6af113bd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158652 Malicious code in lookingan-namakita41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae571ef30fc7e47cb90442c0ce80c9e360c5237b3613afa9742360c94918060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2542c3363f4be2de5910b6b96ba9266ccb0701416eb19cff39e1c39be5fc66e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-publish-koa-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c65c1ef134ce232577df13d5b79811447fe487ad8ce6ed524a8d47842e01d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-dagda-google-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efc8bc5dda4bb97100bc40fad173c85b4a3de359dd0858a8644cfa6de99b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...