MAL-2025-161497 Malicious code in nabuf-otin-agodoag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0a140ffb1849f0e7c3be64466bced50055edf4f4079563449a51b4147c4c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163920 Malicious code in nutr-madan-syahmuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8670fe16293aa2f2a6ebf582846363349ab1d472a560cc2cd6860cd687130ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150760 Malicious code in @miptaa02/isasfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c5a3d3c62dca3f865d417ad3f121abc3715a79b0b9430a9ab40815bfe8c1c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154834 Malicious code in fadila-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e2079d6201e8356a4f88cca2a80b79cf34dffdfb05f39a6cab4b9fcbbbeb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161883 Malicious code in nasrul-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab4f183892402c5d30fa27add39ae37df29d3de5d1067fd0bec73c0d46fb552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163404 Malicious code in nokire-sekiya17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca887de7cb2d5b8f3f5972e2631f8c862baad82eacf88a887f6cac0bc03f5369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150346 Malicious code in @mipta19/asallajaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4ee23628f8975b32ff8b9ed96b710b7dfe53240a71c58cb87e9b7f9c51446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165061 Malicious code in rival-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ae4482f0c00a2e627641ac65fca21fdfed2c979ce5ac7a392a7e21cb2f11c04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170122 Malicious code in upiila-lukzli-ilazou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddfb2dbcebf92d72de16f95cd22934f1a90c117288873e860fc8df995363f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152209 Malicious code in alfiansyah-pok14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb976dd2eb0ac8a16f9653530c7fa6ced0cd8cd09c651e076a425e14a520345c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164477 Malicious code in polymera-manuyat-mudniosps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02cbea01a8aadec1e3fb71e51e1f3d8fc7c8b7999d031017dc000d18cfdfa189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170498 Malicious code in verify-tayic-iam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db8d8d038ca79a29b37e92386fdb291ca60ceecdf940ecd3e293a567a0d9889d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163497 Malicious code in nokire-zabuza100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b6865b2a63696e95762bf9c786319a43ff86031520a5e69dd73b9d60f9413f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170105 Malicious code in upa-lubali-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2aa997298072ba3cfea493b56e59ce50128b286a055c4e62e75f3bba71516d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167655 Malicious code in teagood-nalikoli95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404063514e61d430ccf80dea6660de6eda32867755942c05858ed5077f289297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155624 Malicious code in hafiz-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b23e7597444bb8222442d256456bdee8ae32dbfc1cb1519a5708c812c98a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167520 Malicious code in teagood-nalikoli111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fad970e9519e11e4e46ddf52e89b0a2218c3f910f3d07705a8908be671dbd3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170154 Malicious code in upilka-luzmu-kijnugijani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33e6e194a1daf94fd23ab3c0bdea5bb801b382f3fedbb773fff8df20529037f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169300 Malicious code in trevora-cisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c786bf399fde2a23d53fa81342e322dabb5aca9410e7b2cbff43719cd7ac57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160363 Malicious code in messi-tueda-sddsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0fa41543d3c39ee6251b396876a1acd0b9b85a12c21f4b7371f02657d9af879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...