MAL-2025-156719 Malicious code in inufi-gfobai-jagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9fd0abc2291a207c491e3f13ac64c29c7393582f2b616a9f1337db4a1fe0a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153509 Malicious code in avomainah-fragis-oguaoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b0d5045a65fee82dfd26b0333dd94c2d3c858e69725b1fca4efa52282e233d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160575 Malicious code in modira-fuhopia-janaduraoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e3fd778e77a75c1a18c191a7cda0f770a250e8ebb9887cbf50f77cb87d8f25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152667 Malicious code in angin-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b91aacfe7751c6c6ef37b2b8b3e90dac0c4128fbbb161ca9211271a7088f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156887 Malicious code in irashi-21-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18a0c3c637d71bc9763640af0109c1aac00b7b941709d5a338fefab624c899f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164420 Malicious code in polymedr-mindatas-bui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2990fa279da9ff0cde0099172f9f949a677fc6e243d7ca265756fa88fe3ca382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170449 Malicious code in verify-tac-mhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c15ca41b4eb96fa072e4eff9890e61c3f4a9c3a7f9bb7506a232df52a77ae499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152463 Malicious code in alvira-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616508ae30a89fed64a0e06ddc7f833ddc10fbd5d034a976e6a3dd7518e41e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161696 Malicious code in nabuf-otomian-nosusuadfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9120f5c05398ef098efe01a1a249e6bc16954c2f54e2381b3e0a992215284e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156129 Malicious code in ilal-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3b4b6a9ef2cdbc050aa335c8853a849c1c88e112f2401b21ebceaed34c23bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163994 Malicious code in parwo-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b08b891c883dbcc34c13bbb610ba08b71ae4a5468e17ed6b9422128b2a6401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156904 Malicious code in irashi-sea-swe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d758cfd20ad63f61a4a784d7f23d8dcae49675468821457380da4f989b896c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154876 Malicious code in fadila-poke140 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0673a58b4cf9894a8bc935c7cc294f11242ffb7f2a1e164633cde3136ca4444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152963 Malicious code in astia-alaki-malihafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c38aaf8ad9c92f564538b53c96ec4c3517412736135e391821cdef2945e2cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161720 Malicious code in nacho-bunian-ciu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576fb5d4ba515ed27af218cd41989a81e29ea852a69c29848a077cae465962f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168390 Malicious code in tealove-nameka1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a340572e0fca110e71c146858214d0b1b289093de2954eae881d7ceeb8c68c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153508 Malicious code in avomainah-fragis-oguanuafoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f6fc703c9573b995e51b1c9fc485c17c9db8298c2eb190e5351282e1ed79a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151027 Malicious code in @miptaa02/wfadd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bfd1c851de3f4127e3e2e0626e9a1f52af050cfc0085eb4cf15f920abc92dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169904 Malicious code in uinsu-losit-bismsau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc36ef1cd9dbbf47b1ea48d754a410725c6b5e833d57d425e5134df6cc2bb3c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166036 Malicious code in slamet-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7850b2b5277e18a2e0518fceac38a9046ef85d425620217cbfc1deb3cf474663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...