MAL-2025-154587 Malicious code in dian-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d89726f3ea6585895c2ddf57bf1a7539372a3b4212009dca8ea02bf3075ca8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163977 Malicious code in parwo-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8004a4d6bab13c8c0222aca855994f59c34d13988cb6414488aacf5d3003cd8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168283 Malicious code in tealove-darknest27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80c5e32b32326a9af204153cb138e36970298e6b52466827a828c5e540c395f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170180 Malicious code in uyafru-tuft-darautut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920c539f07fea53c01d89fabfa3f56be88efca0032673f02a9d29c92c498d27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155065 Malicious code in fauzi-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958e22e91ad20e03f90897989c606e2a9f1767bb76d82b2a9dbae914ecd1639b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157809 Malicious code in kuinsu-uiu-vinalimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b389759810716cf65f400936fa538df7f3139ef6d65cd6eb35e3b9b3db9bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166351 Malicious code in sunden-dilak-nulikanukinan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a242173d59707d61429fc1c9a650ea0985c0937c5252e7d3540792fdd7f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166690 Malicious code in tadashi-ytu-busty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f0949cccbfd9028b00522de11d06b88470f5062d2d68fbc191a6aaffc3a374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152838 Malicious code in aril-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f81e919c4bd4dd7f1ea7b876a3f0ad9b9c0357a1bc971fc92f0c5e8c8a849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164688 Malicious code in rino-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a3462de3f9204eeb5873f4d960e71dc6c1bef331be4215b82af575483a7807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150559 Malicious code in @miptaa02/ddfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5256ba81a08313f41dca4a8b718525045d71c2aec4c89d54ed01bf694735a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166439 Malicious code in sunderlan-udk-vaukli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ace2420c58da71bcbe5f14bc521c0e2825f9f30bce8fdceea33833d86195dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162015 Malicious code in nasution-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c595357363caad4beb5cd62ca55d9ab9d2c43f8999daa642ed378fead2e2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161525 Malicious code in nabuf-otmbian-iagssfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f24031bd601e736960122aaa1038c030824b2109f83beca84319db1bb78345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166407 Malicious code in sunderlan-ud-vakanain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dfc6e40f7ff8c87b4aa127dfd6e79e1e43978d12fd19dccdee0ce7519d63e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157062 Malicious code in jelek-rasismem-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f551f4657cc92ddc37f8a1cc9c10eabd121b1f2db5e5432bcd0e41e61ae891f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167445 Malicious code in teagood-nalikami45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9c1489b984f246612a3e213100b430bddc6f1172af0fa3f8f16e41d292b796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163724 Malicious code in nudela-af-gffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d6a03299351fc38f79dc096953713d9532f54d05dad986b66d6a41ea52f5ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155852 Malicious code in ibanu-otabauai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 218d23a59c005a0b2480e827eefe51388194d9f9ba706f0b12314ded66f12bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169179 Malicious code in trevora-cir125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631bd1f90a4dcdb35269e3b28aeb97d665ad5ffe76d3c398f91d1abb41d7ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...