MAL-2025-159648 Malicious code in manda-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c9487a9f19ce61cbd98be35d2598d9f7f25834ba33c5a7d7dde4a9e1126f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156300 Malicious code in ilop-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f55727be591444bbdf1b8f6d1fcbd7a6d4d60375f029fde78acb85bca428abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157870 Malicious code in kupa-lublio-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1b505fd4e0ea37b011376e64b9c1b824604255c789af83eb9e31f004bcd231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150257 Malicious code in @mipta1/sseasswsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e42322ee2d4e8f4994e91d1acb3704bf64f84758cee76f1a33e5e3d3424672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170083 Malicious code in upa-lubalalio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5952e2cd5a67b8a15c3f207cee7721b8593e38de1b36a3c6033ff793ee36827b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155201 Malicious code in fitrok-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2a8c8f44c28c6ee3f5a160b878182628e2bb81192f61bef5eb652739fbea1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169138 Malicious code in toyota-cir3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719c0448788eb49971e593cc0cb571261c61da0a58cdeec7d84398cd37f84a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158841 Malicious code in lookingan-namalaka30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2861283b509524712a834b159715912074a962171a410b8a8782e2c2459b81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160134 Malicious code in manusia-tavil-maasdfdusdfgdfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019479fba88bb441c4d69d9b82b63730a6617feeb9d7f7f16d56b7c89c9dd33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152522 Malicious code in alvira-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b3c940ded46aeeec297bc48c81e9b91eecf844e6619d938ca7abf6efe484ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166043 Malicious code in slamet-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b716b125b1179e396c308dcc931f68966b1c0f6a1af4a76b379eb161f5904590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166318 Malicious code in sunden-dibuk-inp1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca31141ad58d9637e7f8ef84c40ec290d4598f6fbfc9f58818d99360f805e9b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164845 Malicious code in rinto-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6710f55feeeb7c3c865a5dda53c13bc466d650308be39cda03781f4ac9f5546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150000 Malicious code in @mipta1/easgr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457d0975d6ba650be8ca3010c6d189b2e55c46f5c120f8ea3fbaebf8727c6493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165264 Malicious code in ruji-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230f18641b773c2fea4b360e12450cb777de96d26b273f1e7e1443ab202cb448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158512 Malicious code in lookingan-nalako97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c32cf99423b447495a2e9faeafe299388133f8383b72ea22511dcfdda4abf917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152447 Malicious code in alvira-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42600b321a0176c922397674eb2572792bf3fc69585924c2a128124ea7c0f270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157922 Malicious code in kuroichi12-ghgfj-dffgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 785fd64a052850a01305f00aba1a276b1f32564ee3a70dd22e0507350ff238e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163183 Malicious code in nokire-nana30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de1d930e4172b58b8aee7a8dc5efe8aad84cc2032dc324bb7addebbcd4359c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162762 Malicious code in nokire-lokcek100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f11c56b54cf7b6cb3f31a6daec9deb051139d46334cfdb56da276f66382099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...