MAL-2025-158607 Malicious code in lookingan-namakiki91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7cbf11e7481113c44b8ede2c089f952845444e912ecf8c5c21881301e02160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155673 Malicious code in hariyono-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a2ef191fd6648c465768a9f9a48aed86e1e02c5b0fabeb64f3fc4b600b20e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166746 Malicious code in teaa-reborn49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd41b37d3ccef7bdc50930ce2567bf189faa8405c0e61e6850a132435e10781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164682 Malicious code in rino-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edf29568da196c429e4b62182a88f6bc7d1bc1bb42a791c388682ae030eac9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165002 Malicious code in rival-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d54bd140a401daafd58f237f7732674f38fef52f8cc43b7f2f54f850ff7522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150792 Malicious code in @miptaa02/kkbd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ff679004bf780cb290f83a35d128023e14f66c8bde405f67865d7436937536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165707 Malicious code in samehada-daazs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b253f9a928348aa31100237ed838faa418ebd7e7ab9b2b55ee0b3cf80484a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153924 Malicious code in bufani-muyu-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c303790f20c3cf70e78825612e392edb753b352f50112387a626809ef6a49ec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151008 Malicious code in @miptaa02/wea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780c78b07547accf86d9aa772da84f35f6128d30b0ecc7ed1e42e18b377c7460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161031 Malicious code in musik-dai-btuud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3009f432e4c8941441b0339fc4115f8c96d0a00cdf1d2cb9af2e4aea5fcdf911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153632 Malicious code in azhar-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da7ac1fdcc85839366dade3ed3d7364c738200d0019616a901a18eed85e7451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154974 Malicious code in fadila-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74578b3959db2540058a69f473a662480139e26f77e1527ac585cdc0040ccedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170171 Malicious code in uyafaru-tauauimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c28194fb7765c360d43dfcab7f3195e92399dd455508b0dcffcfdae292b815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170514 Malicious code in verify-tical-bisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b03405d8f39cfb205f0d7ad35050ffdc9ef32badf5c50b0bb003637e547c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152390 Malicious code in alita-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfc6c8eeaf4d332608826a1199cee3ff931e56f716ff6afd42003521e4056e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158158 Malicious code in lina-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d79889f185e7de36e6977bec498b9dc1d978127a6202baeb04dac34cd99dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151725 Malicious code in aciyua-iadut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a7635df6b709ef1826bb482edec898f6317eb51b6ac325d29f3b93b476bf7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158666 Malicious code in lookingan-namakita54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c4b35d053bdada56346f5061c7530352ead0505b7bfcfd7988ae5105f34584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155920 Malicious code in ican-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c13684937374e3e19c3afb330ca6d082ff24a5068c805a2944e2d0980f106d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157011 Malicious code in jeep-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49c838dcea3e2ed6cbfb080ce63eebd1898a01e0a4576ee7c1bc298586444bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...