MAL-2025-169420 Malicious code in tusya-fsd-sdeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d35707f319d4e868c1784aea282d809c4b8faa899fd399c34c523da73947b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166358 Malicious code in sunden-udik-vakli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de35cbb589ae1085fa289de11115b13f52c57d83e46cbdc41d6554378bb0d85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159177 Malicious code in makan-aiga-fiuafuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5f1772b57095be54b7e8b20ec490cea58ae844dce7e4d89b00dcfa55328b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150938 Malicious code in @miptaa02/saviontra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd43c9979affa1c32e67599248be342a024d0bdab6c35a954d50573c11390ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168822 Malicious code in tear-sdas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06592ce6521368e96a3555daaff61a284130165ba775edfbcd0eaee1c228f9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164108 Malicious code in pilauka-kabiu-kluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74aecdac223ea3cf5c53606d7f0bed6448652a2fc2ca26df76b80ba6fca0f76a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155651 Malicious code in hafiz-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68127e681d4f1ab0e058e8d640213b9ec973d31969ab4fd8c2aa6ba0e72662e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163967 Malicious code in parwo-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73336b12f8fee0860777d6aeb4d7bd7da40aecb3ad8affcbb1f1c0d8a2c9fc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168379 Malicious code in tealove-naiman40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236f9f45e69901ba877113aa154c8557cd7e9da8ecbd4435b4c2106670f88043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161688 Malicious code in nabuf-otomian-daju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a016a08d7a674076314810ba64fdcfe05a13bed8ff35f86dba9cb3c3edd7604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169648 Malicious code in ucok-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686b867f043b96d87081bf04b988ce85c9972375fa1c877b1a5ac9a792818625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163185 Malicious code in nokire-nana32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6353f372523f8540b20b3835da6e486eb68e5b5dec9902fdf78f2b9b651dcad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150817 Malicious code in @miptaa02/masra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9713b77d634ae518af0abfaeb70feb8699786765556ea46771676ed815cb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154066 Malicious code in cinta-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5afdcf3c2353db90373ed72bb31c8ac0e457385563b3cda86fa2d9fa8cd60ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168488 Malicious code in tealove-nice11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9071690777060a1ff2e4bb785b84c2e162d3e1bb1f0f144ae0348f2d000990f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165560 Malicious code in sabuvauakli-nalabuaaui-lunbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0056f0077189976803e963e2359bcf71678daa6f3f95de200a769860ea3b6df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157590 Malicious code in keyla-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b1a2734c9c7dd9e85edfa0a8cbcab7ff402f195838bc03177b5493546e9627a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157704 Malicious code in kuinsnu-lkui-kagbumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7200e0b457ebed94ae495dd8c45efe95b6e4ba52ab6f3f41ca17db445673b456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161955 Malicious code in nasrul-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa38cdf071a4bb8b735ab71d52523469d30a05e67f47e6f896cfa214d9030299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158083 Malicious code in layla-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25a416f7412689659f1cf67d4bd4e0ddb89abeb65621cc4a8d7359e3240a04b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...