MAL-2025-165224 Malicious code in ronaldowati-cir2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28660ab2bfbce95afb3b13af288e4f384be5eb4fd489a4428c9620cc195c04fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152530 Malicious code in alvito-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10423a6d1dd6e3a834052a5570bd1c1fedb40a6eafbf192f57ae8495465af131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151165 Malicious code in aben-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c2bad4a162cc01c58cc40463968fda876a557b1d008e63303732033c5a7746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163438 Malicious code in nokire-sekiya48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5093b86674703c3f6aa522a88d88ac743ff5140ba59f7f7240b8c39bf6f7db6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160709 Malicious code in modirai-igono-jiamugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259969f3f8784d759088120330cdd0d87c51ef3d20fe2757cc84a5be87158afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160107 Malicious code in manus-tavauil-maoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11444f5497650d9439142b7c51a30bb04104740d6e8bdb8afe7d84aba325f7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150082 Malicious code in @mipta1/iyuglk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31e1024c003a1257f877dd0f043ab7f136693e35a48fefdea388993b6c3f6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152680 Malicious code in angin-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f02ab7da63f5889f752cef7b7b74562df3711784538bd99b8b7dc2d9966949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157416 Malicious code in kapafovgiaangapfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0c7c7129441afc5e9760ccef837eb6a09d56bc6016b5775648769676186665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150471 Malicious code in @mipta19/ytddsus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf20c70187e286cf965cf4bfe0b766ee7fa813d7f02adc890950ca8b0b270976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156379 Malicious code in inal-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a592e7a7df85659bbe14f6cb8d22e3b130ecdab71bb323bb792b442782c8bb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166476 Malicious code in sunderlan-uyud-vamknaiunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9796edb3e39af1aad516a7b855c32e9d4110fa6ec9b4bf7427cc103e69a8d33e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153956 Malicious code in bufpani-muisyau-fanafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5b2c657cb1f4a0b279807bbef0428e83e21534667d7ac4d3bd763ee15722f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157558 Malicious code in kentung-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda81f924f941dc278f3d94b1a5e567d0801f31d27a5bdd6288016e2f56f6db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153324 Malicious code in avminh-afagis-ifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d3985f3c430ac00c8a3cf229d12650efbe43fae9c770165880c63261a2dcc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158849 Malicious code in lookingan-namalaka38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e2bd30b3a02f9cbdd02e5f7755b8a5a27c3cdbd1fad641fd0796341249a23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155520 Malicious code in gurs-manus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503d732fe252b9a1b5aec8e5d3f5fb2a21e43d50ed7a4eebf8ce74d9ac13bfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164904 Malicious code in rita-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e9cbb9ad8714296028b1256992e40ca9f114afdd19a78bba9b5eb0b88852be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154626 Malicious code in dian-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c065b09884b5c9ffb8c8093af6cc828c84dcbead4f7128c06a754a6a40093d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167124 Malicious code in teagood-manaki57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46cb9f25fecc3e6d3325888a1d01d3a323a61e653e889511590e501f5263191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...