MAL-2025-152813 Malicious code in aril-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ef277a349a6ff1b54614e64d732614eb74a86ef76b13900c19f4c8e9024c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154417 Malicious code in diago-kauli-lukakimalaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd60b8d5e25caf87400776dda1117283bc02213b817d695dadaf4092ec5cc4f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168648 Malicious code in tealove-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b23ce83e483768c999e887e7ad1ca470386e9af8450e27f112394d7baee505ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155478 Malicious code in guras-visa-k (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b0b01a91d2e1cc4e2ee9439439e7aa30a55f736b7358f137dd70c966cbf223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150022 Malicious code in @mipta1/ffsusid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48aa7ea91785ccbdb53d0f39fcedc3342f0a613fbe02be3eb5c93b75360bab51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150050 Malicious code in @mipta1/hykh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce04e320fd7254367bdaf8b578dab298b57714814ed8432f28e328b8174d7548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166038 Malicious code in slamet-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df461df2811234295296a44cce6310c778c083ee02c2cdb3e2c87052ff9cc989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169134 Malicious code in toyota-cir14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b02fdeb7cb4026053561adcebe25dff5d3fb094c7ff95e753946d33d5bae10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165735 Malicious code in samehadaku-sess-sur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a7958d9feb400057b4159fda558455e1f6eab17b1cac564ac2437d2c8b8cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163288 Malicious code in nokire-nanali35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5141c4376e13747686a5399b8a4dc1c53aa3f5529c29b3347969af9ba0e7faff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154394 Malicious code in diago-kamoli-lumaho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7019f5bb042a134c69bb17337b78e04d1673b026c9cb78a0fa56f2635d553c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167347 Malicious code in teagood-nakamala79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8e3921ff92c86c127bec956ad519aeb82301ddab86cb92723a899808088bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158846 Malicious code in lookingan-namalaka35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd51c06728638f115367a28774ab7e9c3b4472d667795931676dd80cdea363ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169448 Malicious code in uafagarug-mie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1567e3d9a7fb4d215b838414cba9cf0e77f074c214b5046e61a8c60f3d1d59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160797 Malicious code in muklis-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c3433709d026eb618c6177e3516b64a83b6337b5110c316f4c12c42d234d093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152673 Malicious code in angin-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e803dae050f6543c61d95578329eb90f5cac60d91eef7f266cda58cd5d75e4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151095 Malicious code in abang-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b4fdee4d823f0515b2ed5b3868151d9bac11bbee89de4146a7a34dcc18a3d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160489 Malicious code in miracle-dibook-ikukanamai1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851bca8787651e5239233825bf71b2f4171a4160b446bbc6940a7de1fe832819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152781 Malicious code in arif-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c114c9a328818a3702664c5ecf321d1eab5e44caea87a1ea78b4f4783191235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168090 Malicious code in tealove-aruma34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cdaae38ed28611ef433c570f0da92fece68fe3127197846f6219d739557830b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...