MAL-2025-165102 Malicious code in riyanto-118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f4e60546bc0f8bdb59a6026c034c72b3fb065027b5389b7c9047553cb8500d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152435 Malicious code in alvino-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac1d23b523b27246735a8b708c0f8217f59a78c24ce8367ebf14e1a4795fa77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164551 Malicious code in prayoga-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8ea4be02048383153a13b51174a3c8f063a61d689a6543a9d2be3f38a5689e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165120 Malicious code in riyanto-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803edb3ff33befec1c22e6d3badb3020a505a791ef9cdc65e4eb93425ea46c83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168075 Malicious code in tealove-aruma20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d89b8dda28f2f434df1ab156d82a4d39c8f8a6522f07b36a774acfe6189586b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168148 Malicious code in tealove-boy40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6fa442afe4f92efa8234806c974f44e202bdb9aad2d5cbee77173b55d6e0c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150531 Malicious code in @miptaa02/assyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451a74d31abccfa415482d6afab11fc66f3977cd88e284e05d4b025111365d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161509 Malicious code in nabuf-otin-agogoasdai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed16a4ec64d84b8befe06ff33e3fc5488a2ba8d124b2e8f2424535f27b54436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151640 Malicious code in abuylbani-nikubamia-luahuubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6b2c3e995fd3718dfe784d17a3d4aee2aee6228cd96be1165eab590623906b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150300 Malicious code in @mipta1/uysia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4db73e979bb2679b1d4cdb0cdeeb36c01c1a4d37ec4be3312877222e7b15ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158754 Malicious code in lookingan-namala42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1def28a04eeec6da27de1950772c429be798ddcf03beb328c4fc746ef3880966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168922 Malicious code in technical-aloni-tolankui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecfc1b6589bbe404401609fe49ceeb87a8c9147144526bd3604e00d5617fde77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150642 Malicious code in @miptaa02/fhfjhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e775c6eae96d872f330cb387aa010d67d286bc153372478734a1636149921e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156969 Malicious code in ita-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f89587e298a750a299e8ab7857a054db43e2761de67d703cdb15cefbe67b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153907 Malicious code in buatf-buaat-nagt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ed9acb9bd6126969a0032ea6de3c3758973b89d5c4ea2dd6afcdd3f48eb9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168857 Malicious code in technical-albio-tolimr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d293cb8e35e146bcf3767dc0a03c97729ff1db3b374196adaa8028e55f131ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158336 Malicious code in lookingan-konami72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1419d07a97b65a9914796e9ecb451320ad73bedd56ed4c60e2092680c5a4a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165662 Malicious code in saku-aku-idusanillaaaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2521610331b7f392459f362bdeb2f4ce7d8aad495315fb49fadb3bc98eb5432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164761 Malicious code in rinto-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad1942dd6eb446697cf571a0edd13fb6f72dcd180de6779cdc4e7e33b33a10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155484 Malicious code in guras-visa-korease (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a823849f951f955f9619bb4c90096660a360361d85a2c16fdbd50ab7f111c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...