MAL-2025-156239 Malicious code in ilang-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f7781b13253de2c8e9b5e0c78889752e5034f8e1a0d4347a0a05b050466453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168687 Malicious code in tealove-reborn13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82cf0a54c1c79dca1951162da3c3596ea779ed235c05b7143f4d96b4ee3ceb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167479 Malicious code in teagood-nalikami76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e143bdfe26b8aa33d8e3bbe91328edde7ece8b45daa6a498f18d2fcd4a3f44d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168627 Malicious code in tealove-okta48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34ae56bfecb34734f8b819a6a48c899c9c39143091eddc886e0fdd41ad5df7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151105 Malicious code in abeh-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76558d63b5260f87c983c22e898b60e7ad327d5ccd11c631d14eb92dacab8900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159265 Malicious code in makani-aiavamoba-ufiyaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4391edb658f1704b4661a8e8e07d12b603b3ffbc191706157ae5e5326296ce76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151195 Malicious code in aben-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bbad6674c7aef241ec0a145f0089dddc778aaf1bc1211e17bc06287436f536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164977 Malicious code in rival-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724d3c05c865b5ab3b5d9a8ffa6818b60f8746a4c5993026670a7e372348769c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165362 Malicious code in sabua-muhayu-taduggmafaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79897282e7e1b59106248d0a3b6a9e6e2093426078cf6a7803acf602cd1a7f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150158 Malicious code in @mipta1/miws (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b05424af9f6396c6e231fa88da94c940b6e587f4ea0ed6d8e54d4f0edc87d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164582 Malicious code in putri-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a1cfb7ba8a73b98dfb182f4d3e0e33a3725e74b05cd2ee62a9bf4a771f1f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152677 Malicious code in angin-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29a235f59f127d0550d359eb5b0703ba220da51ec820bfeb5bdd0eedf62aca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164575 Malicious code in putri-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31c6ddf2651604bb770448f532f2b09ff54bee2d2d66b60d67a4a37476e2538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154766 Malicious code in ertacssau-tery-rassismu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0cc828901aec04484a5952a408f55f73e305e8128af2f3bb45d8f32adecdf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155945 Malicious code in ican-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9991c0ef9b3242b720fde3a7c135c2313ba1ea9235c3d5018a30c5d5fcf2d100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162084 Malicious code in nokiragne-afgais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc84a3fd024def18874f318ca3cb8b90d627fa351b594c4b3d7646142c53970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155326 Malicious code in gifa-otau-umotai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5601c626628d2c80423eaf9ca3ea30bd834b8f2a302cf81093b3cf558f587a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160073 Malicious code in manurung-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d11e8f854f89f07010016cdaf9f22c097a8173e58cb12de50b6ee9f9cc13b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150263 Malicious code in @mipta1/tadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81028ba5d18a96f4520a7caa5ef4b2f2135bcaec90020859ee6e2acf28ff59ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162453 Malicious code in nokire-arjuna40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c373a0a78a5aa0afc351a840c8e83c7cdfda462afed5664f69e6687eb946dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...