MAL-2025-162086 Malicious code in nokiragne-asaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa85b8739a7abe1709cf0ccc94dddc5cfc2bcbfeaaf7a5054cc4e4ef8b78ee1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160929 Malicious code in munir-teaars-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02277074aaa6881bceed6788a382032050d3e5da7ef6f700b039ea4aba50fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156362 Malicious code in inagi-vumafe-nauu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0ffc18aab6a8720908634b773184b8377958efdc5cd3ef5316d6403a8fe815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150051 Malicious code in @mipta1/hykk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ed3ac4bd14da4cecfc7fe475d2ca30d411bfaea68c01f95dfdcee1b4ac81f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152617 Malicious code in anak-jalanan-mdn3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e598e41b21a694dd11398cfa9db3017c343aad2d7f9d99e96ca4300012a905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163949 Malicious code in pajero-cir20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8171e4b126bc12c0b8bfcabf257ec7d778f4b60e3cb6beb9cccba4d09459109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154491 Malicious code in diago-kulp-kabauoloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cb30d20c6e66f6bdd8b8995e3baf402b98053fd81d8819f7f9bf695ee78714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150807 Malicious code in @miptaa02/lggh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2fee1f7647a1ea5d21b9ef5e55c5f5065e106873877b615afa931685aa7f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157872 Malicious code in kupai-luknta-igavufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa83581c8a167fe942cd9eb5aa4b3b62e35f49f1a8aa9d769904a45d59372f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153076 Malicious code in avminah-fagiaas-fimokafiganui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d697ad2c99c090d841462491633e7e875e9665088f11e82e5aff6dd8eaef62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168245 Malicious code in tealove-dana38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fa51a7a9a5846462fc7782eae993a9d76d3432a39e7d56746d4fd2f5cd2c66f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168939 Malicious code in tehaah-codfd-nutdara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ff1d6ff69fffee1ef03e8cd25e867c4b66a8787e6789f9d4198730331d1011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158333 Malicious code in lookingan-konami7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b3cb8ce5b43d6a63ec0c0c4ad71055ad82691140da66ff4fa7b96b721a6a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157066 Malicious code in jimmy-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f65020551dbe0f5ffdf91b2b3eaeb8612f42bb0d0f8447e2148395e23db4e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161145 Malicious code in muti-msiuyu-masdta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aaab27eb33cd5414f4194d12dd89c6ff2ce2fff65d3c609f76cc13a39d5bcf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157298 Malicious code in kamasada-nuati-espany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2cfed364a5f8f84adb782b8491e6738cd8fd40bfa79e83d59a7622b62ab198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169160 Malicious code in trevora-cir108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a985947c713d776d263255c6558eb4d79486173050d175f06b3c16b1691fda46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167858 Malicious code in teagood-sukuna99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b170c75aeaea928797159c99f2ca5094196f1d34cc877e843d79372c65fbb67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-exec-sedna-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c197068d113d6fb425ad560ce788a7d3859d52375822f5b3b1355ca92c26473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-native-quito-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60bb1878c8530d69271cfa996a528baa124dbd611971c65213032ae04e9f6c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...