MAL-2025-160179 Malicious code in masan-ofalib-bivaunla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9452cec35ce47bb2119e0cc03e8afd801058be4e78d3ed0b135f23e3a12a6abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155529 Malicious code in gurs-miop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7078806c40886e3a5d49c491a55634d9f2c97993ab521b066006415dedcfc433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169945 Malicious code in uinsu-lost-diunsavuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cddac6c0f895ff3355383fcd0869e96cbc802b6608ea12b1d4ef77e4816ea57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150158 Malicious code in @mipta1/miws (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b05424af9f6396c6e231fa88da94c940b6e587f4ea0ed6d8e54d4f0edc87d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163159 Malicious code in nokire-nana1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4927963b3c52c97d901e87778208a98ee9b6fae25d65d5a8e439b09722f5bb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158001 Malicious code in layla-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19074895c4dedbc23b6df3870db91fadc890524962e9303da8cc4fbb0a3b3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150096 Malicious code in @mipta1/kfdadds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2b42c08284828a97353d27464928c533b7872565d6a181eba9a7960642a530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169950 Malicious code in uinsu-lost-diunsvuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd10e075a0b8926b951c3682b6eb45c94417a63469ffe5a30545488f0b1eb6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165734 Malicious code in samehadaku-sesas-sur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f18c5e2f4a25428fc5bcf94b247d1ef8145ba38622383eca558763307f8d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162414 Malicious code in nokire-arhani96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 654cb29e0fdcf0067a4f51a35b6e6e4e809fe26aa802009f0bc6aa22bb537d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158980 Malicious code in madan-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa2c558fc35c832873117c08518f39c9024a6414bbf9c723db7e90fded041dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168236 Malicious code in tealove-dana3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a16d0f3974e9f0707689185a277637c3d97c25caf33f48bef5845ad32694da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156025 Malicious code in icha-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cafb30d197c4ce43aab4a375b0e2096ef103c2564e4a3b8204917d3484d96f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165867 Malicious code in shilang-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306f389547f41ac2277cce8b5172e1905e97fd0d899dd16aed1d97cb7475692c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167873 Malicious code in teagood-yakuna17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3035149021a2655f44aec750d1383df149e61c78af519d0cbaa7d0a948a52f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161111 Malicious code in mutdaufs-gooda-ay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f29c8339c30e0ed725db8e43dd30f5d45878d41aa5267b21891cb879bd422d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149933 Malicious code in @mipta1/asa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa474c5b36d5b1a0cbd07de41988d27081319c8f814cb39e0afc78cd0cfa3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157615 Malicious code in keyla-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c902c46bf0c30784c829895af6845390fd646c7235a7bdbdd709ff24cb5d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169482 Malicious code in uaragia-mudahi-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a49c363aef4efc43e4f5a8df560a8a9ebeeeb0bd286245cccbbb9a9da98efd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156039 Malicious code in icha-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832f3db1baf0881008378253723d32b7eaeb1611acba1c11577e458f614e08c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...