MAL-2025-151438 Malicious code in abina-mibon-agupabmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3859b9f83b4b79a53191ca492809c08e8b01e3a08d1f47d55c84afba3537f749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153992 Malicious code in butrui-muiko-mutyoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5500d9c921071d2982961a0aaf9fcfb65ff0bd1ea150cab6547b5c61b5d9a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153478 Malicious code in avomainah-fagais-ogya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef90e2ed2f346416570ce7eddece18e28acac6b41389c54fe87abea859424c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165659 Malicious code in saku-aku-idu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c86ff399abee510d89be4811197ec79825a0802990e968f1f69d74da507f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160057 Malicious code in manurung-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d892bf0d6062251938a00dc10a17b676fdbf6d08843b02b71cc7f852616d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154591 Malicious code in dian-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419091f657114f8d55ef452d7f746fcdc2ebeaabf2ce109291e717fc8503d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155854 Malicious code in ibanun-ota-umabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950ca1f65170983e7c65abceb14948b4699326cc09f6381ffa935d84d919c226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154173 Malicious code in dajouka-faa-sa9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a44fc865febe301b0e0725554bbe5978e5ece62968c57d6f91cc5ddd7254a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169780 Malicious code in uinsnu-lotiupomi-kilabarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d3a603b813b196fbe9b08f9c22364fe9c42f9c9a7a8606f7e4111278eb7920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156161 Malicious code in ilal-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2303a8448554d29c8dfca79381959ede2af72925588fb1a530784e1f16cb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156972 Malicious code in ita-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4a846201510313bd8ac2d7ded2f5061336430752f69da458fd429307f2aa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159284 Malicious code in man-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405a71231ed434ef458ec04fda23f12b8f89682977d59a9c01046d7552b3c41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169174 Malicious code in trevora-cir120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a9a561dc3ebd6c2ba3776182e09fc8622d522079e4035162c833f71877420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168786 Malicious code in tealoveness57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc15dc5f2eaa54b939cb6db5b6d7660511ebad72527392d7b531184cc2280325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153566 Malicious code in avomainah-frauasu-ofau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a7ebf376fe447b8b39ca0db951561124a026e7b2213975a9da02dccc811a9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162385 Malicious code in nokire-arhani7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea85d181de26f69873c5d02250d930878ce7ea4f01ce45ae553addbff60bb71b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162008 Malicious code in nasution-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce0c3d857a2d4340cb28d170c86634c33799a53ed687f65cab1ed189f9ee5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145299 Malicious code in natural-indigo-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f37c805f6dd061de76399d9b52952b76e3b19b28a3fe2cad5acb0416bf9ae9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kastra-nextjs-tethys-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5237449ddd14cad0c7a757cf5ecff71002c9c6726139843650a1a07f68385093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-draco-blitz-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180c7a73b5e53a5f51dde7e339af90597e7d2ba561bb2a7f5d61e4aa5b6accc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...