MAL-2025-154868 Malicious code in fadila-poke133 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b122dacecc1e3b78fce2efb868a4642a44c50fab41850cb1b2d7ebdd8e82e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170216 Malicious code in uyaudtu-tauut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206225f292849743133a34d305b23bc87f87a77d7b7fc5e2c2a37875b9232251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157574 Malicious code in keyla-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7539dbf6a730d3f0a3caea8fc345540a429e1e0424bdb78ce6969262e16591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161566 Malicious code in nabuf-otn-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfa1e7953c5680500e9c7ab29e0866df71e7be371126f2dbba45a88dcc43724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159395 Malicious code in manadsi-scaddor-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c84487b98e38afba39f12b9524eb3d68a5c6728b1394a711331d999493fd7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151472 Malicious code in abiuba-avimun-abupumavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff1195608dcff60c6336082eb69b17c50a8dec0a61a45e2d74b49b161040356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167330 Malicious code in teagood-nakamala63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a99821aeba211e06a0123d1d26c940b917b2fa01dc0f3a8fb6b8f83f0d1a0d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150507 Malicious code in @miptaa02/arfag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a599b56d3fde72ae39bdd8b7691c118eafbf23c123b1763d8cc3e759c272dc47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169151 Malicious code in trevora-cir10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc960ad010f728c74c6104bf415b8cc66242f791494009d934891cca66b5e866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165828 Malicious code in shilang-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78cb372b3bf333937813643ca9da6a2c6ba740d09ebd60f8539a6ab5d4c38dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163297 Malicious code in nokire-rara11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850bce3fbcb5cc29383acbde74d721f47ace684327fc88b953960a6fcc3a742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161658 Malicious code in nabuf-otomabin-nojgdsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec6d2609d0e6bf34079115fa1343fa1aca652aa4514e9c5dbfab3270b7c433a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170514 Malicious code in verify-tical-bisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b03405d8f39cfb205f0d7ad35050ffdc9ef32badf5c50b0bb003637e547c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156723 Malicious code in inufi-gfobai-jagiafugir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c13a977b6c9dfa11c415d8580b4f0a5e292ee170d7571bb8e14711b4364c711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160299 Malicious code in messi-buysa-butsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bc074b50823dec3dd887196c07769146e8da62db5dcc1e84327a78d24be0a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165333 Malicious code in sabua-muhay-nyaiaafamatua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5652e6e7db0fd43493c8776c0af085a47a9e5c12399730d2a251e698a67fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157641 Malicious code in keyla-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a549bca7e6fd9a4ef4c82cf6138c361f72ee4f219dfa78d9cf56d3c8a2efd88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160767 Malicious code in muda-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d715e856df6c2342c6714aeefcaa57cfcb7523a3cbacc02d8fb887ba0dcaee03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152539 Malicious code in alvito-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31074e9ed7e6fd80ed3d11fef19b14cdee3d884501ed3e3398a86e6de561b077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165454 Malicious code in sabua-muyaig-bafuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a573e8c49ca572a91930bdb400c0310dbb7f34469c8441c9da18ebdc28fda3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...