MAL-2025-155611 Malicious code in hafiz-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0337dd96b9382862850d6234e0a3f74c14fdec9220c4a362fcbf177f20e38f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152794 Malicious code in arif-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935c9e4e014ee861b4881bbd15ed8b446122bd17e972497e9899f97630519750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154834 Malicious code in fadila-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e2079d6201e8356a4f88cca2a80b79cf34dffdfb05f39a6cab4b9fcbbbeb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150403 Malicious code in @mipta19/pjusr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91319c4ffe4e8f2158cdade5b0b9b8b82686117cff95fc1f4131286d2aa586a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153543 Malicious code in avomainah-fras-ofuratarau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1240e06c635b48ac3403e4abd6f3fabe5c4be323d6ede35b92f8cb85bd9d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166070 Malicious code in slamet-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6745487d66e43f2fd38f1095ac50e1589e4ebb32a8dcf1d5848f9166053ec2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150997 Malicious code in @miptaa02/vedgy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f009628b257ade5e20299178aa42c14c385cd87ab2f632104e0a6f045c9bfe86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157519 Malicious code in kentung-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02167f3e33f423e6bb6cd2dc57640d166f79210751b5760edc1c24797b3d8bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155663 Malicious code in hariyono-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b9f04e420fc1120dbac7c32f42573afc5c589a9e8f2d57d6c5092c9135a680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158998 Malicious code in madr-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dffee132760cbf57c5ea208e17e605f6c3703ca33d52739e32e3715a2aac67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168948 Malicious code in tehah-bautafi-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d210a5bd0c5b50e6a75119a470dea5b3ad9b38ac975f1676854ad6c84fc6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153845 Malicious code in bitha-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d98aa9f4451a9c8c5ee1e133a9f9e28a27806ceefbfd8d61593a5d91a3c9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170161 Malicious code in upilkianula-lukzli-ilazou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c42f81a3d7715003b2574b20e7e5f01fee8250592778b8158c33b32c8195648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153784 Malicious code in bintang-tea35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97cf90cb15c2f78a64e38ec56687e8078c99f08e43eb701346937c588c9b94c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167643 Malicious code in teagood-nalikoli84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7349e164c3fa5379cbcd6e9215a823e9b8fcd4bfd66e150e2e267f386702d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159164 Malicious code in makaimaigan-aniga-guag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eba6c988fa0fc52ad070c34965b73116fe1a98cdb466cafaccdf65d9374c1ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156435 Malicious code in inal-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e444a7d3dd69907cf81f98cbec5082ff1baab4ffd9604c3ff36655c6e46808d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157214 Malicious code in jurss-zas-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2ad4b4532e8209c5dd66b3e61fe262662f87c83e11cc1df266553c001ed35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170597 Malicious code in yuda-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3696bc5785d0c20604b194178269da1d5fa9ec35b5414ac0e1e5039ad179f6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156010 Malicious code in icha-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d541b202d52901bd5b35fcb6f8fc2a70df9f3a58a86d47e70f683a50f3da1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...