MAL-2025-158720 Malicious code in lookingan-namala11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c5ea0391b3a3d646a0db3702661d4c0298a7b811e35734670319b44357676e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161556 Malicious code in nabuf-otmbin-nuyaagfgitad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648d03b7a9527476cdd467950026273bf041fe037bcebf8305a18519f8d6dc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169381 Malicious code in tusaaya-resd-wfesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61eada3bd2661cd44e227356f798925695f035570bbc415c2b9ce272329c9d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150536 Malicious code in @miptaa02/awae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1eb60c4aa9c6124be2aa9d03cf0692d88f89b474242f9eaeba713852f823a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166746 Malicious code in teaa-reborn49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd41b37d3ccef7bdc50930ce2567bf189faa8405c0e61e6850a132435e10781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160668 Malicious code in modirai-igno-jianamgugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b597cbb60088ecf52427e30e22f189692ac46790fc5ac75cffc36237c35f7be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152026 Malicious code in air-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c0f7c4adc7a81497caede62ea6138e46cf2eff0f7a86c4a250c8fed3bc1243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167309 Malicious code in teagood-nakamala44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6375ea1c39202f54b938b0352534570f29979f0afc78f5dad38264e43cf15067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166521 Malicious code in syahlan-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14287f2ff65f940ffd2f2d6abeaa0cd207d6935dcd5fa3528bea642b7027ce96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155338 Malicious code in goodmanmax9250-jump-molecular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc7f6b7e102985148ad83d0c2855c1b5ef00d74ec0f8e4f58905a4d24c171d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151540 Malicious code in abu-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc4f3f8b64f6ce75b8b6a4da1f1d7535da378cf02325868907077daa0f8545e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155419 Malicious code in guras-nitroacer-teajaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000ab5e1dc60fc8d5ecc2e747a2c89ed86f2b066c74e2f83ecd1b85c674725fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163005 Malicious code in nokire-nakala51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d36550ead7a09aa04d7296b14fdf12040f68db54120d5ff8b5705750656104f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150943 Malicious code in @miptaa02/senba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7badf20708abf487ce49e3f553512ecf56c80a741a1f10c789b681c1548e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169155 Malicious code in trevora-cir103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f98a9935d9ca0b481f325507e7323d709833b740378ca586e38be26e5efc7c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168389 Malicious code in tealove-naiman50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87af4954a8b85e23d00c27f3f64bccf2bdb4cd7d64a9f787173b976aafaae655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156114 Malicious code in ilal-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2778ef66fb6e91fd0ecda872dce04399a13550014302c0baa95c77e8dd2fe85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161345 Malicious code in nabuf-oguof-dagusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3ca3bb0094f82081840a8e87f397a86063abd08eb8df2956e617fc2756a77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152360 Malicious code in alita-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b6f3646f839ee440e91346aa3532d34c8881c7f44c8ecb23b07572267b08c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156968 Malicious code in ita-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50d7c19e4707d8695790840ba95c17ec4a68998ff7d23fbb9bfb3e5face280e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...