MAL-2025-161704 Malicious code in nabuf-otomin-nosdfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2580bd3f4a5005f22d6990e28b0b42ed3dd33a2c76a91b93a285243ce0d6efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152814 Malicious code in aril-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a31d4c2a35819d9ffe449b4d7231144b8b504df8029f4c538f6c6fe237aa76c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150994 Malicious code in @miptaa02/uufp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd134fb91f8ae30e9a2798f056fc39c7b6572284c115bf5b71faad8498fba2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165943 Malicious code in siregar-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0618d48e914a382dacb404a3f1f3b28a634c0181d2879e063dcc2fe154481d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161946 Malicious code in nasrul-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddfe8e2b0f869485de4fa820e6e7606d5b237c7d06caec698c2e430d30e82181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155795 Malicious code in huda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c22def7c9da8701bce9b48ef0c8d03ff082fb3462958eb5255f0e08a0119c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167440 Malicious code in teagood-nalikami40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa34fcb55725fb32884c885e211807cdf1f7301f5227e5e826aea44dd7579649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169502 Malicious code in uaragifa-afaoti-uto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b2c0554f9b7ece1ba5e506118dc14baedb07c730d246b67bdd409210445916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161888 Malicious code in nasrul-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777200f9024941c7ee70da96624964d55cf4e608d88f57c50424306316b07483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162891 Malicious code in nokire-loklok38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8fa9954118e2c98adb295109704a5aa09adc972382ec450f5727c03b6d891f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169000 Malicious code in tehah-mkofttifra-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99547b2727a8647f31cb7971fb320465eda40a7490fccc72c33b05be2c66365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159788 Malicious code in mansila-tfla-magaazifidgboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5500181547ca3445f6d7e6d517a6f74c244b07d2a23ab4413d24c73bb75971ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150901 Malicious code in @miptaa02/rassdasdzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5eef8632f09906fce790960af278af350ce5eea42a2c9ce9bf9655737394cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-teadf-nutradfudfaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e93a12b75585999709c7e2498878dfc07041b0cf96a9dd76d96537a20584f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluvaka-kaiuabulbu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aba8dadbe59617cb98e34430aa7be39fdc2bd9495d1e8599cc001fa1ed77b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edc22f146e8f18b016f7556e8dca20dd0a0ba4672d74d48f0eba0de890bc97c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4490ba440d4bbe8b9a12addbd87350faac1644b16e7e322482c12bfc04d702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdeabde79d1592b464378d25a95c6c57b3aad5854c275f37dc623d85015947cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95177eefe6fe558c71ece84d0f535b959f47241315cfb9aa7c566dcb550432b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mand-nofa-mutunau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcaa2827d67b05755ea25ed5f9779f006b84739ddc65bcc7f34e2426e13ad20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...