MAL-2025-159551 Malicious code in manaf-yuki-majadidad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4232cb6b828ae10178ac7692a7f817767c3d81c2e203a391fae7b4c17ea7f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152707 Malicious code in angin-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bf30e59bea43ff8bcc886df164b2470b0c087be318d19744361a08d1324e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165103 Malicious code in riyanto-119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3feb7642ca87d8e4ca9b071f1960e9607b71406fc3b5ce3e02c050c528875334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152113 Malicious code in aji-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50956e4a83bd99ad80c3af6564395962a0c61bbc24b5d0807eaa288a804d1547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150461 Malicious code in @mipta19/wbzoslv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9773f5d3d08cda76417cd00c72d39602b06d586625378491919ebba555ae3ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164790 Malicious code in rinto-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4aa2f0f0c08bc7080162f0348d6bd725922d1a01c77a491688d54fe9055b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160052 Malicious code in manurung-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591673ca1f9407e9886bd4da378721fbfd8ba7019e76562f019b15b1fab19186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161675 Malicious code in nabuf-otomabin-nuffoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62cc36ccad389dfa0b7994d2d02d9c77497d2198e03f0754fa6c735d0a6acda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149946 Malicious code in @mipta1/asdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdee9a3265e5e25f6daeb8dfc83831b8f193881a5d1185fe165d3c87b0e8085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155757 Malicious code in hariyono-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3ad59a9293962734cbc0e101eb00f2c2052e91dcf7192a8fb0a8de785bcc79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158717 Malicious code in lookingan-namala1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4628c5eae96efd2c22fb45c6869bf976ad07c451ab357b9bdd3dfe01d4a03504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168427 Malicious code in tealove-nameka43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07dab3a7eeb65ad607503c3fad331137a93b73dff62c86835e57ea1a6f42485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165806 Malicious code in savion-dsi-ise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618fbb3625a427b6e661a3c46c8fbe2cf27b0255f5023a8fd52b6ff082de9ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151900 Malicious code in aiboa-molpe-asiuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5597c79706b9d81e746c698885e767f68efa21ceef8582566945b9338555bb26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158891 Malicious code in lookingan-namalaka76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4317ff26039dba2d726d3bf971ae58aa05913378a72815f91a963e0d07c60ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149940 Malicious code in @mipta1/asax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3284130a211c69fe9835caf5e37c567492f6ead40338af0e7287f2707735645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154511 Malicious code in diago-kulpo-kaipasno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324f9f967110a669dbc94aecaf7280d6bb93a25e5957b05a36576629e9dbaa35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159316 Malicious code in manadi-scaisor-dadfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06dd983a67da0bd5d05b166289dfd979dc166237c694dbac079f73e36b324c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165098 Malicious code in riyanto-114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde358f86148948bd96286f0c69f1d712c5e609b70d8cac64999e6b0ef61e353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155387 Malicious code in guras-da-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85784851a9440b9445b446a5b96dffc747c38bbf70b5a5648e7e5f2a246f0c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...