MAL-2025-170111 Malicious code in upa-lubilio-igugfsdgdfdgsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553a063ed8d01293b1ccaf6453cbe212f2dd3111e8255b2153c8001aa01465d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162634 Malicious code in nokire-kilua44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7982c350ef140ce70321ae834efce710ffb29a2888062f653aa8aa18048525c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153904 Malicious code in buatafa-btra-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd7abbeaba75203e670731efb5a0ef24aeb2c555563cbe8f0491630c0eca915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158192 Malicious code in lintang-tea33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09291a8b5ac51d5820bd33c300e9a0718ad24f9ad283359abeb4d7c694d99d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160380 Malicious code in messi-tuw-tauas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822bd43f765965110bede682de0560a244d42f79ee913f878ce19a2da83c247a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156475 Malicious code in inal-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47fbb94232009209c11dba655352953c55294c8caa4b2ef91f581c776034aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150258 Malicious code in @mipta1/ssseasswsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba81b782feeb018003c9d8892d3625e7564eb5397556027fd6a0ddf356c16c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166955 Malicious code in teagood-lokika86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00d1415ecb85489a52c1ed265c78eae08fc26372eb55e3181ae415534bf3681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153055 Malicious code in avminah-agfifagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d0c921de549bb95c3914920378ada8c9e0c5e8ee89902327142fc6868ac398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150022 Malicious code in @mipta1/ffsusid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48aa7ea91785ccbdb53d0f39fcedc3342f0a613fbe02be3eb5c93b75360bab51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158242 Malicious code in lintang-tea79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726fec97d7bc28a64ab6c25b81eff246dac6d018f75ab884c1c4c18d17430104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163732 Malicious code in nudela-afogshaf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be3b8361362527e379b83ce7406940345b39edf795c4ba81bb0e05283302db6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164708 Malicious code in rino-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da39b81a63834f9ebd182114263a5c8bd13f17ab9adfd92424d768d92e5be1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154941 Malicious code in fadila-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652c199e3ad0fa887eebcb55e3970f7dc57f687ce65633e47f4560d395a31d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168884 Malicious code in technical-alnbio-toliabanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ef99f9084a24a473ce2aef6d2c91909f4f824ecce1c4095faadb459b95535c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164662 Malicious code in rino-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a01864ac034202b556dc83ca45b43f890164f7f101de559a8d273ea44accb3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155665 Malicious code in hariyono-102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b24ebf8319dae1b453028a493fcce5683ad2d77488a8953bf7e961251c6b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164073 Malicious code in parwo-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feffde46e46d2574b68fcb51d57ababff26824bf82634ab664a14b2ad6fd32a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151885 Malicious code in aiboa-molpe-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef93641c1713649815ccde4936f291db94c9ca51ff8b62e52519d41ffd00a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163447 Malicious code in nokire-sekiya566 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a015f96d5161bc35adf7b3dc5b4f1c65a4168d499105c97cdf0f7afe86a97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...