MAL-2025-154803 Malicious code in ewa-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4050d797d608df4ee71a45281370a71d3b922739154279b8f083ad5bb17ad951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157648 Malicious code in keyla-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c827ebfff9b2763377670a3ded0f1745e11a61da55a4cab827bb1830dbafe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157248 Malicious code in kamasada-buyada-udania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65e8b28e1bc95b2598cf7c44c28e5beed825308b680a7d8b5a486dc9be1ef25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169900 Malicious code in uinsu-losit-bisaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51216b2089fe1cca454329753476cff1ed0a6369485353a441bfa38f8f079f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166413 Malicious code in sunderlan-ud-vakumani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98e1275b68ec306a4e36d1bc0a9401460a961a50382dc33767ff5a361178af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164399 Malicious code in polymedarnan-nufati-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e03627cbd17ad580c44ab82c563b41928d6953f0238cf4d6ae1b67e98df80b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161096 Malicious code in mutaus-mansis-nutayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce0bbca8c0bccafa83116579712d42987d45e7b0fc26cd3d47e42d6f3f14de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150914 Malicious code in @miptaa02/reya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f555e866ee0ade359fb443b2f7caabbdb5371a108b5d758f614b4fe7b3f3600b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157177 Malicious code in jurss-gasd-a9as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7910ebe922445f09d1be8ac7c39cf0c845aea16cb54d06afdd5efa3121a2d0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159486 Malicious code in manadsi-soro-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051285d04a0954243abbec5e6cacc22a88eb77ec63c419a879a395c9a08d997f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166906 Malicious code in teagood-lokika41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69021c08c7d007c1bdcdf0a3a82e34dbacd1f3487089fddf5f1fd75e1c080f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169358 Malicious code in tusaasya-1-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4a97c26a657bf603e2001b24371e65355fe5dff7cc101b82e4c390064bfa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161014 Malicious code in musasiak-naik-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0681a90b29c7877cce234cfda9a80941e330d9998949b71b450778a371d28d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152404 Malicious code in alita-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7fa1acbdaafea4142d78831ac0de35b0a66fba13befde89d3f990bcfeb4907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168575 Malicious code in tealove-nokire46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16685059e544f5d104133762be4e248bec7e32dc0308dcf20882b9e7fbe0ae68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157529 Malicious code in kentung-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623851317e0ad62c4baa83e63fd2bba810f3ea7f721b2351931fee8df8532a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155314 Malicious code in gifa-otau-uasao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34c99f5ff421606f908157f5d9c6f504b9fe958c9c1c8bc8d1a431f1aa12bd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159878 Malicious code in mansila-toaila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca12ebe06cb36425d7f37aaafdd7eff5c1589f89e7e83f4ba697fc0e10f0b28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169612 Malicious code in uarug-miafai-suatafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10601183926b81af9b17c76a3965a34a919882b2c242ec0640e0ab52b2b75c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154995 Malicious code in fatidra-faradda-nutdarddo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55314bca4ace262a4aee35fe3df88851bfed02fbf86cbab11d7c08ec9ffc168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...