MAL-2025-156265 Malicious code in ilop-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66aabcc0d1dfce0c5f876ca005a4becb8ddff119d84fcc4016fd2ffa921ce63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159623 Malicious code in manda-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee2d70a1d14e3f0dcf70ed92ba3b8e109715a79cebfd52b8f1088cb66a88904e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164919 Malicious code in rita-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d2fc7a61fd92faaf6737dba8cf5b04ddc28c18ba4800c061c1289772121568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163519 Malicious code in nokire-zabuza30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38ca2269355c6d81eef9d92f30a5c36578ab85ed9086e5adda8ecd09738603b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169208 Malicious code in trevora-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52931fc0b3223a761d7ee365700cb73c493a43ed2bc3fbba84d7e2608e1db49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168579 Malicious code in tealove-nokire5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177dbccd3a718966270410039c93ad31f306d99630b8f1f3ba54802b0d79add4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163781 Malicious code in nudela-gagaghagaffh0fhf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae2099cb4b91114e4c2910b6cc8fd816e364fc6ac82f8afd62594e31820e476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158335 Malicious code in lookingan-konami71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67928608ded2ada3c2365f1ad8113a70fdd4f0704803ea8bb112d629d72e7e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155970 Malicious code in ican-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f9af57b9cd370c60895fa35195a841271d38c64f21eeafb95fd4f5260870b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168827 Malicious code in technical-ain-itil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9131671421a6fd4da83f4cd6710381523d02333a0a1cde8d9b0cdecbd71003a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169896 Malicious code in uinsu-losit-bik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f394f83ede95ffd8a57a97512d759734205b766aae8d33272d866e126f692360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151830 Malicious code in aiboa-mioloipe-agt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10e94d82929497fcd33b061af0d96000e5608e09bf6f82fdc4d58b8f8a30cf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150252 Malicious code in @mipta1/srsasdys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 606d89e2dcfe0212099b61c396bccfd6f6610dd3fd0c475a29189f89f00e3ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152949 Malicious code in astia-alabki-moiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5568f74f89e237aa88f5192f01936c1fc2b956efd6f2641b97dda11fab587263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167982 Malicious code in teagood-yakuza25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481f10067a88ba5f6b6e8c240256bae57422e3a6cc22eb44165904a1eed3c69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166091 Malicious code in slamet-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f77c49c2e1f6e476e0a235d82c12a4928de9cc756baf9b9b2af64905e3770ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162821 Malicious code in nokire-lokcek64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c70be37aa29960306a885d9d6b511dac14907ca798c13b46ecbf6a1286613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166470 Malicious code in sunderlan-uylud-vamuiubknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d487a31f6db107c438f02d84dfb9c1cf0394e80decdb786c5734b63a044738e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166473 Malicious code in sunderlan-uylud-vamuiusuabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccb2d639b4d4bc10603b7e71ae51dc321d81970dc29185ee762e6733426d196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150434 Malicious code in @mipta19/sceh-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6f2d73223b08c4444fca5c6a80717fc55cb128efd7a2829c7925f456c1cf20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...