MAL-2025-161470 Malicious code in nabuf-otimmn-pigfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b42928ed1dd5928dc58929078a1205b888693baf2fb394e63ca2ca87d7756ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163179 Malicious code in nokire-nana27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efca4862fc50f6957185c0ca3ac25454d4c7d3b7c03e00f04c2fc1a9624f3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161720 Malicious code in nacho-bunian-ciu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576fb5d4ba515ed27af218cd41989a81e29ea852a69c29848a077cae465962f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163407 Malicious code in nokire-sekiya2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e54cde46a7f32f323e5a02d48b29eac36fae684b94ad658c0a96cff9174b2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166803 Malicious code in teagood-cuekin38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424e5aef9923c6cf32f9b00d7ae0d29a5f6bb6a8fb1bf3ce7612b4dc50ee78ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153508 Malicious code in avomainah-fragis-oguanuafoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f6fc703c9573b995e51b1c9fc485c17c9db8298c2eb190e5351282e1ed79a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150522 Malicious code in @miptaa02/asdfdgzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55a09930038ab4902e2adad3eef5eb86ea12f08330068169f66179a487dcb3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164656 Malicious code in rino-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64176cbf90ccd7f8a67b389b924a00fed1e4d40b431eac56d362ec5287a9681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164686 Malicious code in rino-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d61383b671f663f214ae52383fe50d5a9a7415f3762b7f9b0501a1501be69e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150946 Malicious code in @miptaa02/sfgghhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05640315667c969dcf5411732208ea33753841cee422a6f200cc31876e082e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166172 Malicious code in suharta-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3f4d9edabc7cfffe1240a92c0717fbf719e22d5e72a8d6dae5acb0b316a195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150714 Malicious code in @miptaa02/iag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead6d0c948285531c20073b03ccdfe1b73f0583b1930b8913578346ec9d589da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170044 Malicious code in uinsu-lotsi-banbal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b06a316fd1aee6831e67eb23e882b9ac0ac73ff78b6171cbf41715f0e45ff89d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168099 Malicious code in tealove-aruma42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79321dd6ab42ee3b18eba6b5233d2dfd2645b487905ed65a2440a6639edbaa86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165181 Malicious code in riyanto-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bb35e04718541b0b53ae83cff506371c8f8f147666740967b6b1f3166715e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153359 Malicious code in avminh-afais-fafdoafifafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27eafdcb465b03d3785538a500cd60ee0797cc562f877b600ccd459d71424904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168390 Malicious code in tealove-nameka1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a340572e0fca110e71c146858214d0b1b289093de2954eae881d7ceeb8c68c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162440 Malicious code in nokire-arjuna29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3baee7f7842c37f83578ed5ecc56f50a05accb576bf7b27b56b2568aae888305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168507 Malicious code in tealove-nice29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bd5feaa34be4a41e8198323563a65f07facb3e39712ba41b69999064203126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150105 Malicious code in @mipta1/ksofad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831028648104e2ba1ed802f61966c716d99556ed13dacd08c71535dbc395e999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...