MAL-2025-150312 Malicious code in @mipta1/yasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d8aa66d3fd30c2acc332d19856865426618c03b8601741f666f81fd9ecb5f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164022 Malicious code in parwo-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af43bdec3a8468d9954a56ef420b717b9f2732654afe08b99d849d01996c151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152191 Malicious code in akanabi-aligafuh-aihmava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c22f4fb706da449b65b56a06dfcaf9b4ce193fa9c96afe90b571e7ce4c59fc2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161678 Malicious code in nabuf-otomabin-nuoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5388050579ed69eb8a3bf8b98cb80ef139d9f28c09a620a8ce975349b2cfa53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159239 Malicious code in makanabi-aibia-ufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b296e69d9b1549ed0e445098dc69a030f26419b3f11dc575b85d0baad2f371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153154 Malicious code in avminah-fagis-gfyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76168df0cbe6c5efd9044c68e1eee84b6af0cfc5c7b0fe38a8e821e301b2fd3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160714 Malicious code in modirai-igono-jimagifagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6585ef5bbffb588bc169874d5def5c3a5f920b28e609694d2cd2881b21c319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168749 Malicious code in tealoveness23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570c1d8f7ec4cde4ab9acca2cbac25c18d89e3067d3e5982146a04d737653579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159672 Malicious code in mans-manapa-nudt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d95e7fd81e2adbe9bfbfce06750d9afccff85e66be4f24578e9c61f824467e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150576 Malicious code in @miptaa02/dxsfxfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c84f91cefc6c46c190b5d17a0972f3f9ffe21231c11e01bcf10227a5bcb8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159089 Malicious code in mahnud-nofty-gofga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2df12a07ec4934babfdb696d0d1c2f0c973be4918f455fa9dcfd788174e1671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151177 Malicious code in aben-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cab0dc959cb482f61eb5756b78ce9ee9898e2e2f9334ee43c2a1b3cb664887a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163002 Malicious code in nokire-nakala49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545863afc09ae95bc7d6dd019c92ba0702de08d954f2196858da341b5034672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154254 Malicious code in demaf-byturaa-nafmigafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66236e2c1e896512fb83123118fc34f4c4cba436e88b112c2a7debae1cb1da7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156359 Malicious code in inagi-vumafe-nagfufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09dc045f5ef5b51f82e47a03f9d37f6e918b538dfb25c561bcc816b6bd08915e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166857 Malicious code in teagood-cuekin88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74237f989587e2e14a74dd87c3ee2e71d546243f0f32981029cb5befb9e34397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168232 Malicious code in tealove-dana26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870da3e28f84bf51a5af27c4957cadc371f3fc1d2487c64cb5d6627335f224e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154091 Malicious code in cinta-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f37e2797f20831765f7802ef1ff9ae52570b476efafeac4cc55ebea8556d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163286 Malicious code in nokire-nanali33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f33945095f54837ba271e3730276bcd12b615d9bc050e5ed3d99d93493db12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167514 Malicious code in teagood-nalikoli106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe55e6abf772e9995a380eb80897ac8beb5117907afaaf474d59ee2a8f8ce7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...