MAL-2025-161405 Malicious code in nabuf-otgigaf-dji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75a597720633af9f8c190c4520251834e7a1060704f6a999135e76c72f37ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169714 Malicious code in uinsnu-lkumi-kunal1aniakab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d4dd5db230c0bb551dc1b145490cab95de06f3e124121fdd7c21cb0024a0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152012 Malicious code in air-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b8fe28dbba6ae8d98728cb188c25404339385bebb25b7ca73aba0cc30e79ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170571 Malicious code in wulan-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3aacf273766c1822c8d7422019a6fc12d8d9c59ce731cc0acfc8d312e1bc17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164737 Malicious code in rino-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8fe8bb376758ea2002bf6296a5694d5208abf46a62a537d233a7cf30637e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157762 Malicious code in kuinsu-luki-nasunbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710149f6e315741ba164675b280265930ce96fd1a981b0783269e2002cf97a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169304 Malicious code in trevora-eissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bce181b48dedf4c56b06823f9672e63a3e99f8e0323588c4e665b178dfb5ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162590 Malicious code in nokire-genji96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04f91b96c0ba28d0ee2215394177cf64c732e778644aa090eb8af8c67460407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152319 Malicious code in alita-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a86f1033da5857bad5d427eb7b5c6b12a89ad8348e0a110c8036ee3c4bda8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157402 Malicious code in kapafovfino-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4d298546cbc7b696af8d7837fe41c7ed5460f80e9362b165e184b8398aa86b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152318 Malicious code in alita-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc5224644ac5c4fd4438e9b44b5a7e222abd641cd9d540928f27e8cedbf97f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167051 Malicious code in teagood-lokina82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c627af25a02d771be667a7c38a9e6e0579bf6b9c6ab941246aca608a6df615aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151518 Malicious code in abu-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd6a49686c6d94633eb14279cdd26d65efc915b20338ea6e6d6cc3082ca8e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156194 Malicious code in ilal-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27d810f44f3b8aa916c7accaab625cf10fc89fd5efaa5d16666fb3c9db2cd21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165842 Malicious code in shilang-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b20336c8b2cc5f0c7c88336448af8197d6990180f6cbcc3d961b30de2452d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152404 Malicious code in alita-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7fa1acbdaafea4142d78831ac0de35b0a66fba13befde89d3f990bcfeb4907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157755 Malicious code in kuinsu-luki-kopanusntii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4296fc62c25d682d8882f2257e1388465a8f0a9386d332daf0e7295b3e72d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169629 Malicious code in ucok-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c61d70efd2a55d4afa3bf1e6e59e0ece522455f0ddd41d026b9da856bf2837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ksofdads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92ff3579e4e4fc9590e6f4c92c7066444a80dd9d1ba3116ecbccdd1a691af52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a310861ad04921a32ac5bfd45bec205b18bc71861950a875637e27fa15f81322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...