MAL-2025-156017 Malicious code in icha-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2493d44d40022d63985f7ebb53b16b8093fca68719adde59aa5bdba3ba2b4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162567 Malicious code in nokire-genji75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f93f0df5f2aa5835bd79397b6e97bcaeb8a45b4033d91ea1f636ccd4c6a35b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154287 Malicious code in demdadf-sadudar-nurti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b91d9559009a5fc29c8bd7bd541fd0a2b229abf687c8e4763f98a7d9587775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165246 Malicious code in ruji-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829763e7e386add3da18de20d8120173e35bd93719e2f90c345fcb68c466d84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168930 Malicious code in tehaah-codfd-brasew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46373eb6f9e502c38bd6e642c7f5ce26a27c2eaae80480335df8c969676caae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150417 Malicious code in @mipta19/rykdie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce783c17d272e0f3d578e49323b11f679f5ed48c164281c68b1beff96b481e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152072 Malicious code in aji-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6bdaa32117a881444d56afd2c543380d0a7f925415fe696228cf944daee068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158238 Malicious code in lintang-tea75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f442319cd9f3bc3243579b6789d4a624e35751abb8cd1383dbf7ae9dda7b4e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152447 Malicious code in alvira-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42600b321a0176c922397674eb2572792bf3fc69585924c2a128124ea7c0f270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155175 Malicious code in fitrok-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41118ae8bb72b7d3ba65c84bacfe9aea388e0338e18a38b9a50d2ec4ed38d80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159013 Malicious code in mahnud-futaf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8073f2f0afec84e2812807efbc30c8692d232d9358fa732441e9ffff3a48a443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155200 Malicious code in fitrok-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cf76dbc9f52397c2d848d181b97fc535d10c8d73cd01e0e076ddd7eac9476d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158651 Malicious code in lookingan-namakita40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 921ee719f66c939eb13412a3ca66a46f35c9c368a954b240982a7e5d476b902c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150596 Malicious code in @miptaa02/ewas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11297cba1026799f7b2a2eb6d8b3a09343a6aecae250440026eb73fcdc82e19c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150895 Malicious code in @miptaa02/ralsazy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed2682c9aba0ec86af7c9e403c24b87ef03d8e8a5434f995e570c5be59e83f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163385 Malicious code in nokire-rara91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d023b12a5cb9e7aa188dfaa31b93841850b20140d1c14aaa4a472bdf45ff78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163114 Malicious code in nokire-namiresan6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a216173aed903a297aa065529f78e2c4e259e9f69e3addc5bcc6baa33dae8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163388 Malicious code in nokire-rara94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d245b4c88eba581ad5ed46500b0d79c1c6befd0df1b7f3c4a20402c6c316f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166421 Malicious code in sunderlan-ud-vamnnin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18457a71018f043a25e5fe232f428b21489b9d590cbe9c6eca88839ead6e1977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150421 Malicious code in @mipta19/rykie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a2d800150c4051c800c5d11c9418e354d733abbd56261f5c6cf147a53d5f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...