MAL-2025-166410 Malicious code in sunderlan-ud-vakumanaakuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6daa7d85c115c976e3d65434d6f3355160cde324f4e85e4ff71756a3aa5d4f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162462 Malicious code in nokire-arjuna49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f823ae1a63f72c7867d85c5fe9277bfd8fcae63e25b258c96e1752ceed468c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155945 Malicious code in ican-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9991c0ef9b3242b720fde3a7c135c2313ba1ea9235c3d5018a30c5d5fcf2d100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149929 Malicious code in @mipta1/apasihas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e16b890d767d336180cb9f6d5e182e2945a9838649f58cf763eaa0baff16905b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160861 Malicious code in munidr-nerf-minsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cad8e4d2b707a77cfc5408e3a148db5e70482aae82dc5055da39fe23a1ee189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155834 Malicious code in iba-ota-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462a3f5228e0bb4d6206c93feeba19fd983c186d246167372a44794d45fb6623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170475 Malicious code in verify-taic-alusakilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3883388262c42d0675f2402103d6960cb19e9c36c7603df8eea33f6fd8daa51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155930 Malicious code in ican-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fbff21555dc42baddaafaf6daa8b8dc50fb2ae0c8c8c710b518f15b37e17d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150548 Malicious code in @miptaa02/ayab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec355182cd033c5f14b99ee395488578188354922d188b41b612e21a3049bb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160395 Malicious code in messi-urt-efduds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8a449ee822a9d43ef7d2ad18a3b790a5307433f1b3fdd60ad6ae16c4eb8467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164989 Malicious code in rival-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c57aa10da59b736308927277c1d9ce432c61d553a2fd0da1968a94607d11119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155887 Malicious code in ican-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6b7b18d491182271c86cf2e1045e656b5be313843f824353f38cd6e6d10f9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154867 Malicious code in fadila-poke132 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b9bb479e339668d64d5729b29aad677f0352dfe0bd2f7befecf99ecd2e1fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158879 Malicious code in lookingan-namalaka65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4042b5dd5bf91b51d3d6c98247587ae2f08d552f878f0ac414cc670bd346be09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154377 Malicious code in diago-kamoi-liumaakoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b18e336a194c199d7b70b647c13cb5e9897e1ed1f76acf0a91de68a300fdb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153975 Malicious code in buta-sf-asfh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2718c2803b97218eee4397d9cd441bf31cd83d7a8304ee52a6223d1d9b4649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168899 Malicious code in technical-alonbio-tol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1455a9d90c68aa8aec34c7b76c8bdb8c9b0f088964c1d8ccb619a0fecd14b169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164842 Malicious code in rinto-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66438272c851678ce1d946725b6bee6212b2450b779ef615ae7fc2c4d362777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156252 Malicious code in ilang-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f807c55c62aecfe39e97547be8d4ddf185a779698d07cd123dc3fb870a23e89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152695 Malicious code in angin-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa344cec433e6af641f76095fa2b53d2b2a122af020efa2625b8d1425e1b1361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...