MAL-2025-152151 Malicious code in akabia-aliguafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b089a2a32017d484d4355e9fc4b527a8020f1f4fdbc4fb4ecba138c61851f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165283 Malicious code in s-cookik-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ec3bd884b212364035f107764549cee9d7b4082d86a313a99a41756b426f0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169867 Malicious code in uinsu-losiat-diak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e60c195496717d702ae857f831ac6dd35547b9d56943bc94b9e9667f13060a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166182 Malicious code in suharta-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 133789452965c12641ff541954b119645f3f1593543ccd9fe66940792c6c68b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167413 Malicious code in teagood-nalikami16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1497701c29ee8a90337719138410af2c4e5778f6b106f9e11f892fb2120256b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157153 Malicious code in jurss-dsf-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b177587ee9a76ddda2d7b68b5fbc3bd94de5d4a572ad4d923f1a9bde9cc75f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157773 Malicious code in kuinsu-lukoi-kinatmuomolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfd77b28e23bd0b58724bec8f9c105257c3fb444b4527ef26be48775c1368ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161164 Malicious code in mutrasd-nutyui-mutrio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4452b7a681014bd0617eac3dc9ffb5b5e46242654d8fdb94b058da4cd80e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168465 Malicious code in tealove-nanami35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98b4415217b98b388d7507ede28e87bcc040332b4e018ab67a8ed1934a459c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169596 Malicious code in uarg-mitaihai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a3b7a6dec0d43755d4ca6f3380b9e8462f3941e8fbd90025592666e677eba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161098 Malicious code in mutaus-mansis-nutayiropa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dab0b53e76e32ea676daa7c7df4e95f185a6eafd7c5a1fd169117a15c2eccd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170257 Malicious code in verify-ai-aiusamakii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed827db18f14172d62f149bf1c59b87e1f60fe47f71065afc8dabf5a9cc8bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150907 Malicious code in @miptaa02/reaalsazy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fdb52cbcd9bae282da7fb365a8c5cd91c2e803394b4f5d069072ee90a39e35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168021 Malicious code in teagood-yakuza61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3233c2a30487911d7a544a3493e7cc8af26ba55e708a84b9f0d898f3d0fc57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162929 Malicious code in nokire-loklok72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1667969efbe2a0070a3ab0ce959bae8ef880bb5084d45158a460ed8d0f9bc4c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169240 Malicious code in trevora-cir45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2179988984290601da35bde1fd65f8b008e44e65eae4950123707cd50f1f6b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165104 Malicious code in riyanto-120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f44b2fe18154072f57fb80443e99c12e770f1ed828577bbed49381c73fc44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166337 Malicious code in sunden-dibuok-inumaliukinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab97ec451b2228e85bee1b06f95e37ab5ec25aad3ab7e300931445b2cb3b179b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-nodejs-nextjs-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8488e7f3eb1b0a423523519eca85887ecd6c04e408dbec4c05e2e936659200fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-canopus-kronos-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ade41d63c7f9d1622391ff19a184cc9d7b30bf4422aa034da1f374435842c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...