MAL-2025-167955 Malicious code in teagood-yakuna91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8005ae2e548f21d42fd9cd901c6f2cbdc6d1935c984958b04d6ad9a98fd52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170283 Malicious code in verify-aikun-misiuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a268e360cbd2d875bc227f43b18896d40d6fabe83f2e418b7086f6fcc332967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170148 Malicious code in upilka-luzimub-ilnoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5701088c0f2b8d0042c8a514cf6c690848d69635237291be617604412aec27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162663 Malicious code in nokire-kilua70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a8be07874b3f6d18d6838415455a4fca63beb3b4290fbd8ffb9796bbd57c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160874 Malicious code in munir-butsya-sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b5890e20afe7a553f893fccfec6ce9fba4bcdd51f1b190a184f804528b0ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156329 Malicious code in inagi-vuma-nuag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf107e61f06ca715c7fe0f0750fbe5dac29fc483269dfd687e4ea0232d9d1083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166398 Malicious code in sunderan-udk-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0056b752989377de0257ad0d41ae5455c34aa3a1de412412a801cc45cfcdf950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163019 Malicious code in nokire-nakala64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe2e280adaeb7bbf500ba134027686869643fb2f89228b39880ef1c16ef2343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155698 Malicious code in hariyono-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c31147643a78eebfac7a006ac9f261d5ebd155c71a031e252e7f4d02faf5c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169080 Malicious code in tehnah-codfd-mantap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27ee16afe705e033f8d2462c9b90ca36ee861fd78772569d8f3ed700ff63acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150951 Malicious code in @miptaa02/ssai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef1ae87780ebe68cf9cc92ebed79ddb4ea7f240d968f6dd6a6fddcaf1e889a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153975 Malicious code in buta-sf-asfh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2718c2803b97218eee4397d9cd441bf31cd83d7a8304ee52a6223d1d9b4649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157083 Malicious code in jimmy-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1380ee5bd0b2552dfb5c18fef72b5b0ad0224387448c195d12ba6eb1f2fa20e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164084 Malicious code in pilau-akabalu-kuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed9a693c87d1e3c63ba7ca6676d0804a4deee2e896a677fb685e8f78d02276c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160593 Malicious code in modirai-fia-jastyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a433dca6d4c796329816b4088b30b2a3089378839777e93a6a311da643ba9d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152316 Malicious code in alita-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8d7abf27768eb08813704f15d485c648ec027b4c35c7fade49e04febcc658d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153123 Malicious code in avminah-fagias-infgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5cb3649236c5c49767b2d0a2e7f76bd0b2a77e7b7e364a7250ae83144a88b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152360 Malicious code in alita-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b6f3646f839ee440e91346aa3532d34c8881c7f44c8ecb23b07572267b08c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157390 Malicious code in kamasada-nuyata-buyatad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93efbc8f0994a07a15377c7a3c177a3f11c4b5a6c785012f602643fec88136d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150033 Malicious code in @mipta1/gkjk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21398e4385da4c671d063434c6bc4bacd86111172cb62f3a533e7ac8b9e7364e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...