MAL-2025-163895 Malicious code in nustar-miuyu-muica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29eaa0eb8a83fc046d7e450589302bb67ce4cb349a16f009c0e32f3b6d33f247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163588 Malicious code in nokire-zabuza93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa6074ac921fb0a22cb2a07cd2b91764bbffe5f121f928850f025651f904b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167420 Malicious code in teagood-nalikami22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8d9b2de6ad09fc098195328b52688696293c94a1371b2a80c229d822db458c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161010 Malicious code in musasiak-n-fatcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc76d41285c99e4580d62d44fad69c0f0714d1efb4b5b18395e7f6bfada464ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155412 Malicious code in guras-nitroa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9038c1b554fc06d6a52eb1d104cc813558c3a7fe78a3df894f61226256de64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153147 Malicious code in avminah-fagis-figanafyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb619f73fe70c409ae65ee06a43657b7c4f47f7ae1c5d61dd028d42375a079b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163958 Malicious code in parwo-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bafc27ab61c9940d3e44f97aca7647140896a4cb9b3e52d75dbe01010b157c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152491 Malicious code in alvira-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0d912ae87e34625a51eb6dc41caa62cc667afbda7bdc528ec80a8b51481a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160700 Malicious code in modirai-ignono-jaimgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866362308fddd230e259556c67d8368b32802bc63429330fba38d619953d4c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170080 Malicious code in uinsu-tecnls-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd8d3dc28167185130214123feebf34ab5dde10ae4407ea3108f852c88d1fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156909 Malicious code in irashi-ssss-sza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0535a87cdd5c9a0fd3a57617c55beec1061bafe05dd758b898f63827ed10d2e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162416 Malicious code in nokire-arhani98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b88bb40deab006e4fe530ee1928bc03de6259782ac5852f707df68a56754158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164749 Malicious code in rino-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7a7ef108ef5693025803ed428c5871af506905f0da56f11cd95bc008b63904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161356 Malicious code in nabuf-oguof-dusagomof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0560fa902387ec0abe08dfb200216f80fe27360ee2cd8b0caedac937b87f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164203 Malicious code in pilka-luniu-kanuili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ca9a4f3aea51d35dfac75f92a173bd58bd16e206a38d680f7cc1d5cdbc5bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162689 Malicious code in nokire-kilua94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a2d469c9c53d678e44563106bff38e04df910d547c14ae831badac90c7f531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161154 Malicious code in mutr-sds-basta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e653c09560e8688f36e4c3b97dea353a462611f1256f0e8b452402c70b4a28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150768 Malicious code in @miptaa02/ivah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1fb6b26dbb0dcba4ad7c0a5786e44432b1fc038ef9239f9003f331bd4ed10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153901 Malicious code in bitha-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02782fc23cebb0ff239fd6782e5cde8a44198a711c3667f6bfc39a80dc4de87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150282 Malicious code in @mipta1/tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a172f9f51bfe5cc90dfb56ccf221f5f51f1637c30ed6d383fcfaa31d1696135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...