MAL-2025-151236 Malicious code in abiba-alufuai-ayuvaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc4847de8aed923fdeb6fef3fb42d939bc57ebc34feea3868e15adc1e68981f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154671 Malicious code in dioago-kamkoi-alsioulima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eeedf9961893a15ad585a95c5eb092dc3d73043735300743132a900355226e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169483 Malicious code in uaragia-mudai-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756402639ddaa5f0eb2fe282c6ca865575926ed9b2d8ebae64c9e48778b78f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150125 Malicious code in @mipta1/miesseyeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aa119b5b3225b9b086c81375ca26e0d940fa2ccdc99b26b38f4400c5c7b677f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161929 Malicious code in nasrul-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbb87c80c914068bd0de5ca5264d7a74e9e32c41be1e95a6c3879535d25c6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150609 Malicious code in @miptaa02/falak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de7630c2b5cc60ddc1e511bdc8214a4222fc13bbc67405092816785a9700b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150720 Malicious code in @miptaa02/idd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df6d8c2013e24e3a393c6442f566c084224643cc946955cb52be95058f0da9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159399 Malicious code in manadsi-scdor-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84e2dbc9fc09832822946e28b80dd9d434ed356cc91f540309c1a71cbf4788d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160773 Malicious code in muda-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ff0ad1121d28125d306eb272362fcaa6add64de6f42725a1a55141aff9be7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158008 Malicious code in layla-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8e49301af45a1ca4718b2032683688e969e7f4eec4653b5abfa847036dbbc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167374 Malicious code in teagood-nalikami102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a987924275a2ce52961636641097603f17d4de4c74fd9d5c8fdc096c052926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160521 Malicious code in miracle-dok-ujauik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5d150ecaabd2149f6b3e1e6a38088db22f1fd840b824e9f28cb97a4b504c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161660 Malicious code in nabuf-otomabin-nojsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9225365a6be6e830df77b7099fee11347a8060536033ef3a3018805a67231196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158428 Malicious code in lookingan-nalako20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f9227df2137f6177b8a5df6411194f7c7b3d6a627354a9425930a57f90c14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161716 Malicious code in nacho-buni-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b3427dead7d12053ae8873d1c0662d876f00e0adacae41ad4e09207f4aad94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152715 Malicious code in arif-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ee57746a3c389371f9ca2364f6fcf5cf7cc24daea3600689e4683a5e90e078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156101 Malicious code in ilal-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507719186ea047248cb2bddae936460907fa1d145c4b8ed594ff293fa1911ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165866 Malicious code in shilang-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db14c9c684d22cb9405c593f151764950acb0f10a9be3d42fdcc2d53444f415d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151223 Malicious code in abia-avungi-agni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a9c99096c1bae65c508bcc7496bc8d168abf70c3727d64b608fbe67c993694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166759 Malicious code in teaadgg-osss-miuyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1ac0edf00957ae9328bb44d8d2f5bf7b2a73c02e3688149c5a2c8d17d7ed8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...