MAL-2025-153782 Malicious code in bintang-tea33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89002f739d4588d007a2ecd009807262553f90091ccd9c6a6b73d5a0a1ecd163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166904 Malicious code in teagood-lokika4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c90f34be14e3cbb870ae5a16a59584727dba3d2c6dbfe84561fa3ad3864036a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169057 Malicious code in tehah-nuyadtasfag-amanasatadfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d17dd70dc8c5b6e15cc71c7a7a363143d27708163147b581b8cd5f8dc3e3593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169310 Malicious code in trevora-hisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd420af3d6f8d07965fba69fd00fac5ea8faaabc906a2e914bb9fb1cdcbce0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154891 Malicious code in fadila-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d986b3ef44d955d6ab063251509cf6c2850e32f4adf7b9f3c55fe7ac33f5d10c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151009 Malicious code in @miptaa02/weaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5103c1788dfccec15fc0ea658b471f2bcdde9a6d54576ec0fa82216dad1ed58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166714 Malicious code in teaa-reborn17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd9891c3fb948896d859fdb1e9fee7cd17fa8d87cfe6568abaa45e74ef3f29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162928 Malicious code in nokire-loklok71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d2f06438080f8561a7547a7bf4fb1d9c710902ee03b98b5fe85b4e890b57ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166047 Malicious code in slamet-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdb93605a5d979ccf9275995b2cd7dd35995079e4fce628f07da2272e98caf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166341 Malicious code in sunden-dilak-nuboalits (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 470d23b64cc65a54269898a602e06555c7c83d858c71a6cd905fea5132484725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152483 Malicious code in alvira-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98f7c241a0ead8d3f55dc33765dc7d7fa67f94ba3564bd5311b647b565f0eee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169771 Malicious code in uinsnu-lotipmi-killneauar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be97d98fe2def760bae06ee172fbf36825ecb649d793ad6a244f2214fab604f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156943 Malicious code in ita-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898525d264648b2f2eb9509a1197b843a91f8c927689960c4c39229e7bc52292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159711 Malicious code in mans-matdu-masan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906511ba7dc1fca12ea8675013e3089936682b12b712cd1fc533a009de23b53d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154264 Malicious code in demaf-saintfea-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e8455879182b51b6db759a83d077fe3eca615335665048502d7febc3c158e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159050 Malicious code in mahnud-magu-namasfai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85ea41454caf2feff3c5ab0c17cc6a458c800943aa4d435948a3372f0f28235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162877 Malicious code in nokire-loklok25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ea410f1e35b9b184d0a1e54c21d89c076c3016c5d673b22e47581b46e5b253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166289 Malicious code in sunden-diak-vamiaalam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e2b47b9ab6e044f7b676dbd5f157dc1600f9dc27bb1b1acec99e83aa168e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168649 Malicious code in tealove-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946a7d9fc2c255713a469d5a96dc76d4b4d25170a9f14f518b66232c180a0cae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165295 Malicious code in sabu-nali-luxfgsnzfbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c016a4848f0ae6b56464e480c81db962ef1dab805876e601722a446c390467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...