MAL-2025-157538 Malicious code in kentung-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defba12be78d529bdd9565c6cafb43e497147fc0ee8cb3748737d74e3f2cfcad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150404 Malicious code in @mipta19/pmpr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0232815503b862ca15899491484e37a00f9a40e7552f56abbd042de7c3b50d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157817 Malicious code in kuinsu-uki-vilakamnaubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66aa808858fb4481ab67d0dd1d29acd61ccd5f39bcdc0bf449be455cd08617dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159523 Malicious code in manaf-marz-masan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd3f45145979c8ecd1593778a84e3191fc0eeab0822669f6c219b65d0c5041b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157752 Malicious code in kuinsu-luki-kopanusnataiabumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51e7a496f5bc440ac818b2735ad6f01c2219e2031f5720ab6d291cb4c8671bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169588 Malicious code in uarfug-miu-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daee1354e93f93cabea11a385950fceab8155d4d06d2327326d54bbb3dd522a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152422 Malicious code in alvino-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6287610bb2197273311326c2d681c944c2ea76fbf15f0eebeec07c9bd5ad2615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154742 Malicious code in dioalgo-klp-akaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243e6cbf748d4e86bf3dba842d43cdd29d7abe3ac338dfaf4c0bd93bc4a780a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162531 Malicious code in nokire-genji42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5403f45fdfcd7e349f42f53de6f70b16db4625bb1c2df988dbb9102ed7afe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169403 Malicious code in tusaaya-ss-rfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c2e62a2fa5e268f9472d602300cbff484252b79aeba458ea1703fdad9e9d89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151477 Malicious code in abiuba-avimungi-agatoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7895b49400c01b2034bb65ccef3d0667d4709e5fcf53797ac9917538552083b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153334 Malicious code in avminh-afai-fauofaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d764ed7f10ce569873834ae4e66377a1290ce59c6fde98b262b205ed6a5701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154016 Malicious code in carsa-rdeti-busdtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5aedb371cd1e533392cde146435c429c09a94d129d6195fb70729e84c96cf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169153 Malicious code in trevora-cir101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector facd63048cf62b4103cefb49bcd2624ab0763a309d30302b2181b6e2c99b8a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164208 Malicious code in pilka-luniu-kanul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8de5ff33d58d66da4b31de456fb06e7a772ee57744d0b63cce29f04093a197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151112 Malicious code in abeh-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a4afef2a1e396c5099e6296a1cda1354063ba7602ef08280d2ca823cdddd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163182 Malicious code in nokire-nana3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f3e07462b1cb8c31155a812985f34e528cf2e6243748ae7f0b0cf832aec4b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153613 Malicious code in azhar-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fcb3ce664487c8a9914e358facc756e057619d52d336eec911534d5b8e35881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164207 Malicious code in pilka-luniu-kanukuaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84b310b6026a10ea67b4d4573931848dc4606643f71acfd235541392f5a46dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165639 Malicious code in saku-aiu-ian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec67e49840d7ffc56541bf13dd3c5be45e73dd82a496c29693ac4c1d5b679c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...