MAL-2025-158404 Malicious code in lookingan-nakomi44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360f9b9a842e6c9ca6d3e7130e8b8f698d2b0a35fba8b8908c57b9435d8fe99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156284 Malicious code in ilop-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 141c97e82abb99dcd0e5aed50dc5e39ed69419b6a7592eabad3fd6d54848a4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152337 Malicious code in alita-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd65919f348ce56cd31ba18b6096b324104b47e53166044761843a219e7ebb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165194 Malicious code in riyanto-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d63b1f123c38568e072dd7bc48ebe26e0d0e559afc7fc95f89ef69748e6958d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upiila-lukzli-ilazou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddfb2dbcebf92d72de16f95cd22934f1a90c117288873e860fc8df995363f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a7656844e71cbb0117291d942d529dfce370ce73d2f46f198386aebeec4413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eabb453b72ffa96d3b7dde58862cd957d279424149c57dcda5fef31d7bb7d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166059 Malicious code in slamet-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17bba3168632f0a05d263b4ff5aa5749bc677e755562e5aead7fcb10d85ac304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156178 Malicious code in ilal-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a36f0e55817077931bd538b94640a942a98f7e32d5c2f118c9a23d50c66f51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156702 Malicious code in inufgi-gotumafa-anffafoaaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4d3c950e4e8c247daa713b4de601a8e877f4e330f5e4bc25205bfecd1387d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156891 Malicious code in irashi-2aa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea4306e8c518625590928f49ee35475a775bde8850db9021a7ccf7f216113e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162534 Malicious code in nokire-genji45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656f45b206708f51a823e3dc1c8c294528f818b1b52653d0e4e46b5764f13489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150363 Malicious code in @mipta19/g1enser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8e70ec97cdd87901f00bbd520bbc4ddb7952061a7ef4d1bb625992148e443d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160457 Malicious code in minahasan-munaro-ps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bba4325c9bb357d26e83d2fef70095fff94b1fb88e9f873bbd75f3c614e6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164426 Malicious code in polymedr-mindatas-buipenajar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6787064b18250e77ba327b890bc5687b1730746df92257ad002d41bd497647db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159633 Malicious code in manda-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6209af701a75cabf5fa6c1f6461c9fba7e41d232b074ca5c6d8d2f5c051d3cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162067 Malicious code in nitaaus-s2-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3007ce29a24a023413629665731097fee68e9efbcbdd5fa89da71ba867bd2fb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-fofaf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d11dbf5e43de532f976e0c5b46cfb6ffc71850448d16e2a42b6f84f48e3dff29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc082ad2fee625342e444c3a86f3cdeced3923ba9c7376bb1847c96c18da9d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-m-bustyasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf757ce585ed954423cc000cd87402b43632696a1120cfdbda1a03bf63c237a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...