MAL-2025-157361 Malicious code in kamasada-nutia-vesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a09064cef1e8d60b1c50b64e00568178ebdb63ef9a089f109c2f6e1de62d7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166515 Malicious code in syahlan-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f52aebcff48cf6ef4b836409f1607215899bab86b88b5eb1ca1350af53be637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166628 Malicious code in syahmuda-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f2ba6426bb11b3d79f315e3c0a04daa47e46ae003c9509ef6fd0825df19cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157260 Malicious code in kamasada-buysada-dair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174f628946e4cc6aab883bbadf0eec72282709463e74052384deda938a25e5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163759 Malicious code in nudela-fofgaf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 149d11d07cb42c44c68724b356625f894e19c1785420c8ad147d4d9b5d351132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159100 Malicious code in mahnud-nofty-mua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17faa2f23a298672f09a98e08a2d846d01a396f2b44ad3d242740845cc45777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159967 Malicious code in manttu-rolae-gaugak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c5b1915b0f487a7f5eb11d87edccab63557a2364c754ec5f484727303620fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150782 Malicious code in @miptaa02/jzdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74751c07619ab82b88e50f90eb7a863f0a46b54d44127a3eb9f04acc197229e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156229 Malicious code in ilang-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8383b3bdbecd68e64616a4163195539973aa6646f6420c5fcf78cee79f8a99eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165763 Malicious code in sau-nai-iyulaiup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e202f0e3b28ad2892ae834090983a80ee3f49aa8f50d81045dc804e6f55cc552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154186 Malicious code in dajouka-sdfaa-sd3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a552e53938ad63a678351df56846b27fc4e8795edf89a7c9d2d968c93c3440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158763 Malicious code in lookingan-namala50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68795e56722c9b128593857bba59afffe17aa68fd48c626a24c4bb60ee5f262e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165125 Malicious code in riyanto-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200f8832cf666db60d0d581b3048069007c3fb3e9ac348e58dccab7dc5420067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158565 Malicious code in lookingan-namakiki53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733858fe9406bcf43126c5eb872456b9a95152184300be9de4ead29d09c8341c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150983 Malicious code in @miptaa02/ton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a854e906616d03a47cf52173406175addc9585c888a6b591480685bfbdcdc47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151877 Malicious code in aiboa-moloipe-asiinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1ee14c9524581a2223688ee5bd58970b79d4811306e6935b420581df477d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156542 Malicious code in intan-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63db5031e9198b6862ea3c1e7025e948f1d1ea144f7a405bb29e83fe5eaf7bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155252 Malicious code in flight-dange-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d81ae7be4c3203c7315860dbaaa4d9291e9152b014baf31af88e6683e545a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167228 Malicious code in teagood-nakama61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc90200b13d1f436d2dd14bad43bdc8d403fc1ecdc4f1f1d0b0dba893e2d79a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152994 Malicious code in astia-aloa12pafeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e745ec6d05dd93bae9bf9b296319780083022ac1fdad912f54679ee911df89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...