MAL-2025-159525 Malicious code in manaf-marzu-masan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa5aad4f1d937f04b41695ef2c2ee9350ffc7ecfa610e3c0203f6c6e9cfbec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156277 Malicious code in ilop-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbdc965353c6c9e97c6bcd2f9bdfde6524f07a4d8369cb75a3b50a75787dd0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167229 Malicious code in teagood-nakama62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4772cad26423a85b4a26edf51211888d15543575499dca07046292f0944f674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166307 Malicious code in sunden-dibiuk-itarukinyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7a82086abff41b4b807f54a2310c9fe5b81338332bfae860c01ad97c8be633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150297 Malicious code in @mipta1/tyuaddar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94216074f22f36e3b96686257e0fb301c2c0c6dd983a8f2cccd41c28833fae46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158378 Malicious code in lookingan-nakomi20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa60367828e1ab5e48fca81d1aee66e415c7044d57d4de14054ee2cbaefcee3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170287 Malicious code in verify-ain-aiusai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5c79d5acfd72dec55702e5dd49d9b6a9e7e3ec31b02043e63433200a909e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164228 Malicious code in piluka-ali-ipibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97cef7ced91e81cd99e5d0a15d0d7caa4745f6e1b546fbecee52fba5c15760f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153042 Malicious code in avminah-affa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de147e0d11c015473dd8b469a3fcf25e2fce4c07242023c84cf25cfa64117814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154005 Malicious code in cara-buniasn-jsaunso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baef55f1ce9791c8d105183b2aee47652f96cb04eb99ca47c7199bd4f66fb13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157369 Malicious code in kamasada-nutsai-kadrffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d1378c6328415a4ae669b837378f6deb848bff70a810bda353e790bbc6ce9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152729 Malicious code in arif-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffecac563896e81d8eabf809aab1c54fb1f4cda0e7efab75d4aec284581ecef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154814 Malicious code in ewa-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b869e9301d5aa3e4262da9416cdb7d1d1b416fa0e304a76c82b31fdcc476b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156032 Malicious code in icha-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10baa66a2c7b0723052f7f44b80a18c6b1fc1a26cd3e6ecb956ee123187c1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164013 Malicious code in parwo-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0808d4e2be4738c75a2dd269d13609eb09ac16a003b24767e21ca2f66b502dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399f3d12fc48e5d1b562cbf97f39e9ee7d31a99477f9a00dd868a8f525c48f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d23f74ac7cc2da129a6f7556ddbf574f3107c3efc9dcf3d01f7187f1899e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f9a7f6b009570ea91ab11cb063fdf6be641fa8d09f936dde3a81e565d9f3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5a257bc1ae0ae858141708c6416b60e3c7ff7168a38a0ee6bc0d04e64e2d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36e6deada25f1c52b45fb6904a37b3ed9f47690b5af096ce9107f9126c68e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...