MAL-2025-153811 Malicious code in bitha-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6699a89b16b0f6025ec906c707c7da9e40163e6abc20e8803350a810411b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152371 Malicious code in alita-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9c5d3457d2ec4dd8451dcb2d778395b61c1eaea0a53f0f6286cab344b87a87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155366 Malicious code in guras-asia-bang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a30634e2dd308ce521fefbe1c634d5e98dcacf263f42708644ee625c724a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163463 Malicious code in nokire-sekiya70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44bb091f8380106410fea89f6051bd4a2d6dfdd893d5687954d96e0cce161e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163484 Malicious code in nokire-sekiya9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db351ab272ac72324899fca32a4735267373713751f8cc8927f3fb27d7ac7a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169237 Malicious code in trevora-cir42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ebc5c6c0efccffbfbbc23b653e48b5eeb6776a455c762cdd4b6709c5342c7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153650 Malicious code in azhar-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b12e0353c952f8dbe6bbf67fbc73de5dbc3d0f093ddfde7c1d108012f528919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160585 Malicious code in modira-fuhopia-janiutasu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014c1db96c55a1058b9c41f0851c20c96c9cb60a4107fe6de6d36d53d3d4b380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160488 Malicious code in miracle-dibook-ikukaai1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f4567cb86a9c214285d69544d84ce4e1a94465179deecf118ffb8ed954b19d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156807 Malicious code in iomodra-fuoa-jafulfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e728682ce2e70784bdce757fddd72a246c35365191da115e09edeb8c5e30a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154875 Malicious code in fadila-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0561f501d61ce66087d5134af04a2c505a56de2557370d6dc84ef1a35e927dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165281 Malicious code in ruji-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad9ee62606e5622638f6b7ce5acf9b47dfe286e8f29ce9464049b7d39758eba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162899 Malicious code in nokire-loklok45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ebb097a3e62326784d5ad2fff5835195cd70394e10fa4cc8d45f545480cf06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157767 Malicious code in kuinsu-lukoi-kinatm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272c645d12f3cb7d3f72973a35367f53775be354126218adb516c5e2910cdc03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165913 Malicious code in shilang-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afed44884dca3bf57de334c1cb193229bbc51ebd380e78ca78eed3a98e2c846c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164045 Malicious code in parwo-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f4802df50b247cae709d91538e54d4fc9dd782989c2d6dd4d0b67dde3f6de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156573 Malicious code in intan-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 379db84597c4845d865136d3834b9be5cbbeb57440c207a0bdff6e77d01c59e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160512 Malicious code in miracle-dok-uikayaabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3aab7de9be422285ce71e720ec6a97d980a4fd67c42df0ee107bf76e005417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158964 Malicious code in madan-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8b5a83a44d3c38e083e280a1fd40a40c038103218ac7dd618790bdb9561ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152513 Malicious code in alvira-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a21c6d502b51fc79121a04303416815ff2be52349d62a0106318e9550b83345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...