MAL-2025-161606 Malicious code in nabuf-otoimban-igioamao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647a12ac6f2a3f65388d636582829cc5f2f26703fcc5eec9e843c3b4e011e6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157651 Malicious code in keyla-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb91277424e172994cb078c57c987ac7c83f373888c9e37bc116691fc2658cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168735 Malicious code in tealoveness10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb75fdd8743c216305fd9ae264b98c4c97ad17c1442f8f54f2ba5d2c46854584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157733 Malicious code in kuinsu-lubki-nasununabaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bb5efd8eb8e5955fa0d589c9a43edb1321361be027c4ef921373c2ecb7a0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156301 Malicious code in ilop-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5861a776ede16cd93ceb93618472c7a7e1ce5f35f98ca1142b931ec95debc4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159585 Malicious code in mand-nofoayiaf-mutu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2657f8fa8f5f54aa02fa439bdce778d0c21b5f2baf6edf91bee0d6b9e8ceb4c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150651 Malicious code in @miptaa02/fis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed5b2e744fbab740cc611dc2076ef5892c7490d9413a61436027bbce597c905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161441 Malicious code in nabuf-otiganaigogaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f10b410290fcf5aa3033645aa746705f9a8945fdb689f4fe8d0991841aded79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163464 Malicious code in nokire-sekiya71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6eda7cf3c9ae4dddc57d0f26934f97d562c061c7209899e3535491cddfcc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150632 Malicious code in @miptaa02/fglkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d8ccb3e1fec89b8758eaf3afc66b7f6e62b8c7005806df6f970fb3615caeaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3acf9293a6c1670d9a98431e11283feac9655f89650dad28dbfc10976272e6c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150645 Malicious code in @miptaa02/fhgj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector befb599244b2750d9fbbf690467886a1f3de150f4bccb5dcd8b02e1f89f638f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaasya-dgd-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eac99e1b2fc00600accd8492d7bfd33d99c500c15a43769bbde9f33ef02825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bbe50f677409572b8fc314440d7a46dfe4c9a521521997e8038b624aaed1377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuati-espanyol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed15b52b9c7a6a67715e0753c1d315fb748833f6bdfd3214fbb4b8d63e9c3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-admfaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1287ed2076360549b4e40f5da8b17d18429bdb97ec90b37b6a06a24b1a323049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158960 Malicious code in madan-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9bb45243e284fae88991ac4509ae044386af8e5bafebf132122d45ae825aa05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156363 Malicious code in inagi-vumayfe-naaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f51267fb948dc51023d86d729143c51507716cecb36c2ff35a9d6a6aec17420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3a9159ec854555408a31f4ffccbb512542c9c2a5bcd274f7f8e6861e9b16d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-djyi-fssae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d4b3251e6f7155f5b943fa8c924473ada2e1011b8315f247c8e2830f959c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...