MAL-2025-156942 Malicious code in ita-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceed00085c980ba8e71a7bb914ee847987d43e20d95bbc76eb0c7feaa4a7f823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163734 Malicious code in nudela-afohgsihaf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4b518776d344c967724a0e6b7769de659495169845e9a0705526f09453d484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154641 Malicious code in digo-kaimoi-aiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99588ee5bae34e350e31c30f547eff72ffc9325001fe19ed53a5a8ecad8d0999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168332 Malicious code in tealove-lady26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a9847e09b26c89c03ba850f9687215a6f6991835c24869ad6ea96437ccf6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165103 Malicious code in riyanto-119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3feb7642ca87d8e4ca9b071f1960e9607b71406fc3b5ce3e02c050c528875334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161151 Malicious code in mutiasfaft-burn-mirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f09f75291dd369974f728e5bf739694d1da6f8204c6c9bc46c3e5cf5c9d436c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151828 Malicious code in aiboa-mioloipe-agigsapnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1beb91c7f149af1d08db010d667b16c92012a21b77787c63fe57ff8f0a474f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166652 Malicious code in syahmuda-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327ded663f2d9a4e14d2bb45206d05ff9acc1f15b8cf143618a29f0b53e863ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165247 Malicious code in ruji-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862add8b0b9aafebf28f5fad94d24e6459bfd1c6959a2b1aa67bca38fb741f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161217 Malicious code in nabila-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfd2cc32f22e2000fb2fb17bd1c2a68ce2960b20296510eb9074c9221ebf93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150643 Malicious code in @miptaa02/fhfvxj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57851cdfd4e14e40aa641c35d71e6e8a298038e12b19563c944ed7e46dcde65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155845 Malicious code in iba-otana-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5106e92a2e7f3ef4c75b3ba549dbc05b9a883d8f17ac911f1b658a2eac1ba6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157166 Malicious code in jurss-gaasd-9sas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6092559de832ce7cc2cb815286902f39f9dde14405c7ed935ab0fe7aa1f5590f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162998 Malicious code in nokire-nakala45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 253a15d3dfe8dcf5275a2220a9d90ddd38e217bb4d3aa9672df2c5a81b76f337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150821 Malicious code in @miptaa02/mbape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1195723813c4fd9cb29b972f2d59169cd5543f520cf2a24e2aaad025bd63b239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160974 Malicious code in muny-nutsdr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317859b496a3f5e06081d2bd444c6e85ad95dda35493c7533201d68b2bf8b210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152334 Malicious code in alita-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64411674ae14ac00b897a60b5215b811bafb4cfc0a4525ff785c0cf609b0b033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160651 Malicious code in modirai-igimamafo-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4910a036863f9feca32f1b2f86257e58847c1d82a033961d1aa337901306baa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162955 Malicious code in nokire-loklok96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5c0ef7f12c801ea9f0291aacbd6cdf1653184035d41376f32415b3a455f65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-publish-concurrently-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ca53b27778645d89b96eb595882242733d814a4cfe82678efc4b8e67b9ab61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...