MAL-2025-154348 Malicious code in diago-kalop-kalosohak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6328179f9c3c853fc67981d08532c4fc5a63136af410140ac18068c6a11456f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169280 Malicious code in trevora-cir81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a875ee08d94b78faa1ad1c3e1c100c0edec18e7496379360fb6e2c53f810c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157445 Malicious code in kapao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7962eeb403198a1d94c25a117c6b0b07bd0d96bbc75eaedd05b921be2fce7216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158768 Malicious code in lookingan-namala55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd07060a88f17e4fdd8c2701bad266b7d8f5b946f86c7c612aeaf5db7aff7da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170288 Malicious code in verify-ain-aiusamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cdd55157944163e5b3080ae30d8206d5b9ebe36a8f9a64103fd5e2fe2c08fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165846 Malicious code in shilang-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb85466fcb15757c3797c52adf9ba57bd8a3ac968d432091fc8108cf7b1749c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159626 Malicious code in manda-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36f6b8f4961b60acf2a90d655e8c3177801a25dcb121d251e305157cd52aeb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152500 Malicious code in alvira-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb601da993146c49bb4177bfc6aa0ac295a3b1ac1d0f444858f442696b4f34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170214 Malicious code in uyaud-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b639934a0a90fec9c091eb79b1914f6fffdbdd3787310c26f9db3078ee48575c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161407 Malicious code in nabuf-otgigaf-dofajgaagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f948272e8be0b55fb3d4986b7b79d27076d81c23cb7dba1b4fd5c4fcc4b13a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160522 Malicious code in miracle-doki-uikayanabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6418f095d020e4bb8935165e54c949e69256b8ae5af89dfd65271aafc915119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162245 Malicious code in nokire-akaza33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788075d1713e7477efff56c8934082988eacdf38e09a8238bc40535da2772b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158487 Malicious code in lookingan-nalako74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c823bc7b594e40d34e77a07eb403d9609a7f08bb25de277765caa07635e10577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150555 Malicious code in @miptaa02/bvvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cde8bb52a0cf0bf82cee79240ccc1265b76cdd0640d0dc8a54d874da8d386f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170264 Malicious code in verify-aikn-misualaaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad3acfba6b4800384932d2c61fa5ff451cca96cd1718dab67eda5804e422a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161877 Malicious code in nasrul-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52939122ebb702a44755867c89030d15bfd5c5955ac57dc6c2f663e211945d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153686 Malicious code in billa-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07aa5087a07258dd8fb3a5de81b400b496764a755915328d6bb6cfb778f2147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161045 Malicious code in musnisdr-nuyt-mussast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be975ca1400554c52e4128d541b98460b1369df3e7d0defef542e9adb4df9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151543 Malicious code in abu-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b23f16c0cb8826fa04b53488c2af5aaec7cab5a36af86c68be618f5722e70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159314 Malicious code in manadi-scaior-darena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cff1893d5c8a1428a97ad4cac4f4096292d5a6a97b5adc8641ba784c15f20d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...