MAL-2025-168862 Malicious code in technical-alin-itubauiail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59416d214b4ee573c7452d0e135c71c4ef9a327918990d25c89625d2d17fccc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165923 Malicious code in shilang-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbbe5b328ff113f16bca2b9ae5c29bceb294766d5688f78b26394aa57002e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154570 Malicious code in dian-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0072efe7f8b2b34f6615b3536d3c294f3903ab82c7aa886f225f5c209f2b080b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151318 Malicious code in abih-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d5b58b1ce29e68aa7c114b12f8d31d9300a81dba3c80d3a64c8ed8dacae599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157389 Malicious code in kamasada-nuyata-buyat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c7151d13165c2c1f3a2e30b30e8b5c90b28c34c4742b0b296d3f863be27746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150767 Malicious code in @miptaa02/iuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971fdd1cd4a18564ba8511d8be2b7b026c60447889a5aa84e7be48cbb74fdc08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163502 Malicious code in nokire-zabuza15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55db6328a22986a71e453994b1f3c21860d1c32ca2518361feec13634190b64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158011 Malicious code in layla-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d516434544eebe424b3aa2b2a16c04ac6cede44c80dba53efb33a8cc0bccbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164106 Malicious code in pilauka-akabliu-kluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dd0a538c4ff0e1072dd4823c0e1eac083a449d022e700d5dc119c861f67930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151901 Malicious code in aiboa-molpie-ara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647c864f1f82cd51c7470b584accad4c75c663420770d8dca5fcce181a79e278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155168 Malicious code in fitra-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa8d5a2b46272c9b37f7bb1ae39bdc67c9cdc0bce7869e12d7475598c1c93043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168824 Malicious code in technical-ain-abia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ca7849583e2df0f5417fbc33d350f4fbcdef7b50571df2466150442ce4cc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156596 Malicious code in intan-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0e13a1e7953076645d78566de32b8451fb626e60e5a532481bf914cb7446a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1131bd15da59fa4494bd9cb146f5a4c71e4fa3ce9a06a53e6b858aba74cbfd04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152481 Malicious code in alvira-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5617f4b1b2d746bd652f17ab0e7ab5e2c4d4ce1ddc577d81d0616df63d00d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160159 Malicious code in masako-males-nba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badd7023af3e2302abd0fca71841b2848846cd69f3bb0e467ded91d010619177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgaf-doiafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350f7239dabc208664f3267bbc2ccbbb66fa9a7647e728252a0045603ea6b05a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162129 Malicious code in nokire-abimanyu18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3cb688b9ffdb438293be11d220719035e2cbc52f2b06e3dc2dd48b8e1982792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160763 Malicious code in muda-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9db90610c42f52b3baabf89f3ad02b5ac6e80d25d2cca85f15c5521e66ea27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158617 Malicious code in lookingan-namakita10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abe351d0fb05eb63c236c40b3ed4d7b65315a49799c6dc933556f9dad6f3477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...