MAL-2025-169605 Malicious code in uarg-mthai-sufatiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d17a6298b517027534fc4aafdcecd4dc6ae5680661c784fdfc26964f701c98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163835 Malicious code in nudela-rahfeg-agsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 030a129f0a1fc6acda43c48dec05a1ebca673b8a803ac3f4012299603b9aa965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158661 Malicious code in lookingan-namakita5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9810e24aa2678b280ec4aaf8f86075d424ac5ef063aa2b377e95f9cae8c9b475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150201 Malicious code in @mipta1/safd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cf6f6f565d607e067ebb0d5c4c989db7544f80af61160fc38c2c3e4bc482d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169179 Malicious code in trevora-cir125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631bd1f90a4dcdb35269e3b28aeb97d665ad5ffe76d3c398f91d1abb41d7ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159223 Malicious code in makan-aiuga-uyafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5cce71e957ada48bae69fbc0ac66cedc622e73c36ea69e4aeae4f3a1dd6867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163331 Malicious code in nokire-rara42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adb3fbe78dcd84c3ddcd57a82b7e8f05bc067e65c80927fdfe678553d24da9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168162 Malicious code in tealove-boy8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e51681516a44759209470d4bf83232ce1964a3a3be2f622b466e922350d308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152646 Malicious code in andriani-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50f29662df13cf547a5ef90ec1022cf38fdff12eb906893be507ab043146afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159820 Malicious code in mansila-tiafala-magolollani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43498bbe80c459f548108e280167fcfe8c2dea624d15b3386951fab6672e903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157049 Malicious code in jelek-rasis-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf580b0d87536a4236be19db2b41e3e978c45a912e42be45ec97eb8cee703944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169242 Malicious code in trevora-cir47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe6ff5ad14b593aeb7df2917cabc8e1d47acaf240b3f087a100c739aa77d89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168013 Malicious code in teagood-yakuza54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8840d7eaadd09786ca7b4ca38cbc2304a1dd5b32020830def7f46a197a9b9ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163177 Malicious code in nokire-nana25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31bc820b2107d66689978a3c91843fa4de88d0545544248944dd7c7ffd9de841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154355 Malicious code in diago-kamli-luabaoiquak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169f7ea8c640856accdad56f01af24c2ddb23b8960aeee52fc579b62a5a4ed5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168133 Malicious code in tealove-boy27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5af24f2b8ddc0fac5d0cda540751ff372c4be54963060219f74e67905b2466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163041 Malicious code in nokire-nakala84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49bfc83b5ef8911d9783ec4b57a8bc054bb17c119d65483d93ee00abdcc66786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161256 Malicious code in nabila-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8418e59703ee5f90168ad5ebafa0ce7311a935eb77441b34c713d3342d791008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13319880cae03296b3c5c8320aaf8e397ff0373a195c6c9f79632499d1d2506a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a12aa0d66e5b1c890849a22f7e05be96006d78cd9d0dcff24b8c413988e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...