MAL-2025-154414 Malicious code in diago-kamuli-lukakimavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3777710bc15d25dc22005b8ee869feed0024c89be45baddbcbcd6b911d7e41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169333 Malicious code in trevora-nisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29881b94f54686ff1691b73d0bdf2473894d277de6b68c0b6e99356c243d36a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167156 Malicious code in teagood-manaki87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50d37e36203071ed73c4741617c5788ad2be55816bd2ae5a718f3304139f439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151157 Malicious code in aben-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a782871db9d33bcb2b17766bef3babfcb1862fc3661affa2532b023eb8de87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159306 Malicious code in manadi-scaiasor-didaafra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc767904e448a4b3fa86352de2c8e4b3327701e11b20bd4f68813b7eda57356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164650 Malicious code in rino-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7736c707ae0b9e2447ff75f41b34a100dfa4399573a067cddce52f957f265426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163392 Malicious code in nokire-rara98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a0816e8a0df2fa8bb42fe349e73ef441f7206af997668f7c5cc589360728768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167565 Malicious code in teagood-nalikoli153 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d826d3e783f2b44ba4ae8650e51d8b9f8448aca351bf3b045874cc442a9ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154574 Malicious code in dian-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e08c1d99ed74aa75328d503f37de380a9574c8f56cbbb546b51657befcbfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160930 Malicious code in munir-teaars-sdaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1cfff9678c8bbb1154695b5d91b259cf4a3cd95aaf4f46c387481f495b83daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154225 Malicious code in dajouka-tredua-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e296847cffec914bb3b88c53ce1a5c934d0842e5de784b7e14ff50caa1b84eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156552 Malicious code in intan-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e92ef8e87d1077fd8bb934666e01023bd107fb5f90125d24e53f3f133a19bb1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150300 Malicious code in @mipta1/uysia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4db73e979bb2679b1d4cdb0cdeeb36c01c1a4d37ec4be3312877222e7b15ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164761 Malicious code in rinto-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad1942dd6eb446697cf571a0edd13fb6f72dcd180de6779cdc4e7e33b33a10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168950 Malicious code in tehah-c-brew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afc886098199a31cc98ad8d4ff2f276329f82e07012c8b0cad40146d574b4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165000 Malicious code in rival-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a639bf06f6ee23c110d4aa922ce9b727574fe48f1c2e2320944fa61ff84ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163808 Malicious code in nudela-ofgfaf-aagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a447b4bb627400ef467c97c9bfa84892099dc2d948bc4537ad3ea8a6e8e41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163544 Malicious code in nokire-zabuza53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26565aff183be9f8fc53a4e56140e54cff5690c48130ce70b1118ee00285316c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162304 Malicious code in nokire-akaza87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e6e958d509c4cd10ba103c322921b94adbb288e1b52aa764b877e807e9f8de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157569 Malicious code in keyla-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6d08bccc6a741f5cf25dfee34b992b4c7e7738674518c3c198bb92e61e12ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...