MAL-2025-157374 Malicious code in kamasada-nuyata-bubayati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c113063ef96725db3d007ba9083fbf804961a5faf1cab2c06c28f3b63213ebe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160703 Malicious code in modirai-igo-jaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0aef52550047b408bb57ef5391bd7c92157865c2808c3a106ddea807f2943c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159868 Malicious code in mansila-toafgvila-madasazhfio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118933b613d5194a2513fbeb2d8f9a522e84c67821e1933ae172624a285b4300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157659 Malicious code in keyla-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f10493652898eea2331bb1213a2a3ebd16bdf60886ed1df6478c8fc7e2a532b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162583 Malicious code in nokire-genji9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2729e21cfaad0ad5623cfcb14f4a8305199f4e1d8e4a630c70cf538fa5dd86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154790 Malicious code in ewa-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2a301fcec12c2bfd5a73d73fc13d3d4737e3bd242dd9320e629107dae5fc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156104 Malicious code in ilal-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e81db8634f71116ca486b53ae662de09fdb1761eea9a41d169e2a5fcebfb635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152644 Malicious code in andriani-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b40f6806402f64d2000ca5201cfff139e49bef77e5ec8ccfd3a66f77a41af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170149 Malicious code in upilka-luzimub-ilnui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e07ec1b4152f0574f80f144dcc48ae7a04218930ec6e1cf1bcada5dd9bd4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154595 Malicious code in dian-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c631ce6a5c9cf93bb37f95e4a7633eaaa70a3ed088dde5c0b82979af0c0a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156645 Malicious code in inufgi-gota-jamna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca0e28ecba9c195a40d22b3c149b5501807e4fba85e3222503c548ca1a278ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157347 Malicious code in kamasada-nutai-kadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e43042a54239d584ead8ddbebd97cb833ab78aa2579bbaeeaf858f72de9d567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168506 Malicious code in tealove-nice28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f927c9740d12804f853b61b444c9b6f5cd79995a22dff67f921cc4bee9c7714b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165868 Malicious code in shilang-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a335f9b0e97cb47f8f77f13534ec4071988c6ef25886af276ef34172e20e1ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150735 Malicious code in @miptaa02/ikadashi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e0f88acd4b300d8859486b515a28937bc377ddf627c5d3abc912fffdb62a1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167705 Malicious code in teagood-namakai5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d267447e9033e8e064adbaf6504a2585d5f20afe7cbe07c76fc1b26e03cd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153210 Malicious code in avminah-fagmas-fogafogfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bccc499d59e0fde499ec72b951aca0aed6d97d41cfe1a4fbfe13f444567bcea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155166 Malicious code in fitra-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53eb2cf867d4a3cdbf6f80900b202bee80b2cd99f874d235b47cb8207668100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157955 Malicious code in lala-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94b868a0d966c34947a2af5f3619aa1a41a5f467d47338159d057e2d669af0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169084 Malicious code in tehnah-codifad-musr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edc2bddb7747c68fb7bd80d20b4947a11c8f5024df6917a9d3106cf89ad3d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...