MAL-2025-162720 Malicious code in nokire-kore32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce8faff1276a2020df1026d899941c92c5d58316b7ffec1998c44de5c6dda8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155688 Malicious code in hariyono-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618650488eb55ee940f7cf0fe2478240c4105342a1f30316e4e5cf3f2186679e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161116 Malicious code in mutdaufs-marima-bustyasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9283e2eba0d23a56e7ab32b39366a763eaac78f093c69f35f14a860794eb721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156254 Malicious code in ilang-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae69094bb1e53fb2135a30ec5fccec7641c0eca21f6095e92e18b9e9b880c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155099 Malicious code in fitra-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d5f364f2f0840470eaa65848288b8923c7d6f2c8ba77666d666341967574d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158202 Malicious code in lintang-tea42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131973962b44fbce63588adce7fab22ff2c3ae9c08e0fd8a3ae89b577155c48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156913 Malicious code in irassdhi-1-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a48649ad017a8634b9af7354c56cd985a5aa658cf197e4f4f38a6a6f4652a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163908 Malicious code in nustar-miuyu-syfahdmuada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba742e22dd025675312f647849174245cef1d11cf749885e25ad360f9a1298c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155301 Malicious code in gifa-ota-uofo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5b9cbda97b841e81066c7f7eae4517cfaeb6fe108309a5f616fa5e10e2cbc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155585 Malicious code in hafiz-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3027de3dce0147bac79cc7e4ca1318e9413ce52a5d28be675de8acca1ae7e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72eb915230558258e1e43ff3fe8772e19e47b0c7ec082650447781f5a55d3c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165147 Malicious code in riyanto-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199ef657d1a64886457d29f755f4d68de662bb665641b13742ea531693256b5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152809 Malicious code in aril-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d753304d6292f59cfdcf26fe6671134c9e5579915bb4072f8016415b133010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150798 Malicious code in @miptaa02/kkkud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de11ea24c739ff28b453d944d858b0e839ca779a9ab5645604fb7dfb1ff84e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166091 Malicious code in slamet-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f77c49c2e1f6e476e0a235d82c12a4928de9cc756baf9b9b2af64905e3770ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153254 Malicious code in avminah-fagnimas-ofisugogafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97e287ab46b5271854926aa69d402b7bcc7024729f974539820d4616f6591e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goa-jamuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd5f5f079cf2e9dfa06c143d01a37b802bdd3c3617e1943276b6e58615de2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158939 Malicious code in maalasha-nut-posisionin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1d2703a7b2101c109b4fd17acf805c915d89fd9b820d0c28e0cf25124aeea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166844 Malicious code in teagood-cuekin76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20076a8b7af421f37f1603c2ff773d35abefb73c943a11c1d8ec2b7ce23b497b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166439 Malicious code in sunderlan-udk-vaukli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ace2420c58da71bcbe5f14bc521c0e2825f9f30bce8fdceea33833d86195dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...