MAL-2025-161479 Malicious code in nabuf-otimon-g0aig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14622f17b58058a0be2513f3537d53a07a3d79536bf13ec52d0859dad9ffb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156020 Malicious code in icha-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d8ca40dfd69f18bdda83d35d49c44802817e8c5a80e87511d4568725621515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164582 Malicious code in putri-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a1cfb7ba8a73b98dfb182f4d3e0e33a3725e74b05cd2ee62a9bf4a771f1f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166401 Malicious code in sunderla-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7948a39224bd86db5687ca4e8fb63b92ca79baacd9977bca0bf3d8a3e5c9e4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154257 Malicious code in demaf-nudday-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7b5f759d5eabe3b4637e1af4d60f6b6a5e734dbee4c9a654448281b9930751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169749 Malicious code in uinsnu-lotaizmi-kununasilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb177fd07fa92ccaf0f5136a7701c9c2316f57e9256d03035d17e9cca0e02d82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166090 Malicious code in slamet-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412a38a812e00a67f20d48b0a2a3221828f63b1926d191ce3263bb50e9a24637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165562 Malicious code in sabuvauakli-nalabui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bfee167fc92c467e16beee7380f6e3c542017d4fdae7502ed80c99cc61b74f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159902 Malicious code in mansioda-noda-mufngu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25af94d03f91c60dd510c099cce6300e6f3dc0aac9c11b05961a23f3eb46e322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159887 Malicious code in mansila-toaviala-madakio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bbde20e9bdbff7f4d3d69749c9859660df5b58df21ae55dd5e3ac7bef6bc385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150182 Malicious code in @mipta1/qwas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437295ec77d5514f7bf41ee2d4a1df160a7cf1babcf90e9e0106d12ec1bab36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150348 Malicious code in @mipta19/asdd-s1d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0768755b12114795a5f7bb2f8b4d05be5d093c9b38dba48a9e7752efbf3ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165952 Malicious code in siregar-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb0e302963decb0dc388589a6e39526e9092fbfdaadaaf68f5ebc854df74c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156618 Malicious code in inufgi-gobagilai-janqigaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7687ea6e4ee78f059103f92087a74d3de469e69c94b5f4741baa759f457be266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156152 Malicious code in ilal-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7b971c485343fc868ceff071b259d0eef4e36d117c0a8d4c4dc41b88016630d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161890 Malicious code in nasrul-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f2923d0a60833ec4eaa4704329d3bef8676e8f2b18847f3fd287f10d5950e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168223 Malicious code in tealove-dana18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6e9b70c3eb8f6fd66ccc768eb51a8ca3d9875ed4621dce3815d8f92a21d9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157106 Malicious code in jimmy-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b4474d4d8455c75db3cff68a6a4b0987678b188bbc2142456bf675b04c497b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163211 Malicious code in nokire-nana56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90021c8da03f3f619ef1b6cdba58ea0f555e3eb28cfdcaed22cb987583398b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159617 Malicious code in manda-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642de07dac424184be3333b4eb486fff6b8e3cb3e1cffa9af839ac710e0ab217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...