MAL-2025-161306 Malicious code in nabuf-ogaf-doifako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcc4006fe89a406cb940984d193171b085028aae28f672b5e055aaee5331f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166480 Malicious code in sunderlan-uyud-vamukaaiabaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4090c532416897ded6d1c61711fdd78007eb8874fc294b32867a94a2c67842c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158051 Malicious code in layla-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f247f0c81323421a23fcb023d96a9763b1ce0db9fc7246158368368fdaf88c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163474 Malicious code in nokire-sekiya80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bebbad4facc784dafb2ecba10c6bc6596f1747698b076decbb090cd21ec0c33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160803 Malicious code in muklis-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e537cfba2a7c2395e256814d776984a7fbfe40057ef9a8c9a3864099b05bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152807 Malicious code in aril-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e547210cee7c020317a68221994a3aa384b4bdf1a99f92c9ea7b57332ed960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168650 Malicious code in tealove-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259a0ddc49f8d8b4a466a3f1e52b3067c3a107b1db67e548351caa308c959b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160712 Malicious code in modirai-igono-jimaagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265cd15113df709cb0ee770047e3dc166772f6f40fee5ae4ef13dcd7d27d991e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157330 Malicious code in kamasada-nussta-buadadanto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a3ffc64032fabca63d80bf346b78181f8c1b9e8435443e2bc1276e94ac36a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157260 Malicious code in kamasada-buysada-dair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174f628946e4cc6aab883bbadf0eec72282709463e74052384deda938a25e5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169247 Malicious code in trevora-cir51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9634cc9dffab094e9c48009248b4cfcbd9c904b4a8aaf4e8092d11be7c28b0d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170350 Malicious code in verify-ayai-gal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54efc75da73c17a7155de86bd9507862d985f55837e863e76005fc04fde83fb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160543 Malicious code in miracle-dokloi-ikaluasak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f8bdfb5170b06958867a9703ee587cdf793bb7c9ac140efd7908a85c01976b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151037 Malicious code in @miptaa02/xd2hdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c16f873b49f5e97109c9965c526710098faf50a1c82f0ae095cbfeab7ea5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151124 Malicious code in abeh-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a461eb65fd7d7eaaced60d54cf48d4df3a7d4abedb537c2a89a1f2af72be8009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160744 Malicious code in muda-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb846ba3be78e9278978e375368f89bd612ebcf9703f3c89fa068dd9eaa777bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150476 Malicious code in @miptaa02/adafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e1f65b445d376cdb20fa85cd3d36760115b42c7fb06785eff739f6ba6d45aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159168 Malicious code in makaimaigan-aniga-uag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7186d1dcf40ae9b3cc335a2258ce71dbdc428e78ab34239847fedd78da49da56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163767 Malicious code in nudela-gagafhf-gasfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c05b4f8aafb7ab3a2ed867501c6044ef3dcc374ddc4dfa3080b0b9b8f9e1b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157403 Malicious code in kapafovgfiaanggapfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e0a7f7f20f8bb37f49de004ba31cf584000ccfa2bc7c58bfe7ca40e90eddc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...