MAL-2025-161568 Malicious code in nabuf-otogafin-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8267e59211aa6d1c418ebb6b931aaa4946366019c681b33621e0e468d2feb197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152943 Malicious code in astia-alabki-maloloiskaiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09ec7de06417ffde7fde266c1cdb10886d6984acf09fa5dd7bb306c75f4de76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150691 Malicious code in @miptaa02/gfud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297623e8e05c32953bdf684bfc70eeab1c725b5452f8ffb4eef613837178882c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170139 Malicious code in upilka-luzib-iluanoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902ed3c98cda70a106a0a8eea06dbba74c98a7492a6fa7caca5767f0b3034910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158062 Malicious code in layla-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9de5659b802a7f1d59cd7a95d2987dcb15527f5340dff58eab41a4d151f598a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156019 Malicious code in icha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb09fb9286901ff7e40445ed548cf13d84f9833430ac5d061d8823766aff9031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152311 Malicious code in alfiansyah-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c310a3262bf96f6db34eeacd45ea5ad4ce1c6831713f89c34239d8d931a907e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155278 Malicious code in gifa-ot-uoffuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc7cbb85379f36977864ca740deab577a88fafa4f461ee602438946930527f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155433 Malicious code in guras-nutra-dfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6985ec93b5eb7dfb79cd55acc366fac623a4d6db147851384fd65fda0239451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165471 Malicious code in sabua-muyaig-budauaffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b0edfe711d88448127a0f2213a59291016a2473c14dd39e0186a95e3cb0082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163274 Malicious code in nokire-nanali22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3fa430ba7e44f5fd7f75b44e2296dbe9cc67eeacb157f13b5cd95f00758c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164297 Malicious code in pitra-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4893d56a3b34ac1208bce6bc217cb50f4cbbe1df9fb496fab4d3b7128d197ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167957 Malicious code in teagood-yakuna93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31e581f44251d423b8139663e69b70cc8d5c09fd148194b0c8d2f7eb3983077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166446 Malicious code in sunderlan-uyilud-vamuikabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84ca2cf152431b1fcbc10736461758a87eca65da6752f120f5f0f1ed7ec88c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164743 Malicious code in rino-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15570af979bf2047ea4c5d58abd602d1d9ceac5ef00eb68992643fd5db9a403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150516 Malicious code in @miptaa02/asadeg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68402810c8bc792755ed852d7fe6c4dc5815bd162744b983972ff5886232b7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168154 Malicious code in tealove-boy46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e054a44f1b84b61878171089243301ff475c566911dece9262b1ba670aee0c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165974 Malicious code in siregar-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c7ef822090001142acb36026fb6e5a975b52de2456bc5c914120cfa36ac2a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169073 Malicious code in tehah-nya-buta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7010a428d58dd661c06feff0dcfc56efb6266acb371e0139a6397c6ab2dd49a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156154 Malicious code in ilal-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c90c4357fe0760697e27b6c44d04bb3e6f7eb9ef047ab56849fa7c23b594b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...