MAL-2025-165370 Malicious code in sabua-muhufafyu-tadamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5eb5b9856a6152b96896581ed7e75b4b8f2b068b5fbd8ed6567b7a4096a32e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166307 Malicious code in sunden-dibiuk-itarukinyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7a82086abff41b4b807f54a2310c9fe5b81338332bfae860c01ad97c8be633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158813 Malicious code in lookingan-namala96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a923ab56693912fde2213d832d2db4096f875a6bcd93f38e2e723334cae2029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166023 Malicious code in slamet-poke119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528971ceda871153e2842933d06de11a7ea2e63a4f803fdd7cdfa8719b7e314a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154117 Malicious code in cinta-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac725d6872d30010b4af526b9d60f0f585e3cdd09e6fd41e35b05081dbf6d1a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169090 Malicious code in tehnah-codifad-nuftaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7ef4020e58594f1ebca11fbebad3de9450ac3e177141d48db576e54b829337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168433 Malicious code in tealove-nameka7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3926330cbf22e85f6ad60eb770fbed7c79f691eab442721a8af60b658477364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169305 Malicious code in trevora-ffissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8a5e3c555e6d53f2603b8e61c89cfa1ed1c4c4212fe921d80adb912f98c050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150495 Malicious code in @miptaa02/ajyib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe6a35c832cc9485e3fdafaf06b3ef37615f91b93deb4635f1665d360d25750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164776 Malicious code in rinto-poke121 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 491cff21f8ce0311879a1be5c12447043e7cad8dbdd82b08d85e56e2c94cb98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169208 Malicious code in trevora-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52931fc0b3223a761d7ee365700cb73c493a43ed2bc3fbba84d7e2608e1db49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164670 Malicious code in rino-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317b40144f0f03807c853bc50fdbfc9497d0e8c09caec5c07a77efbbf15e0125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170287 Malicious code in verify-ain-aiusai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5c79d5acfd72dec55702e5dd49d9b6a9e7e3ec31b02043e63433200a909e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159963 Malicious code in manttu-nuyatsfi-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5a6078b35b369a52437666ae1bcba722aef0804ef9124395203857bc525b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169316 Malicious code in trevora-jjisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d91d32350125e783b70bfe38d082a629a8feff040e71b8652e0097c0f83ed3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152525 Malicious code in alvira-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3bd7c630097e0dd14f8bfe908884975c75c66a45f666ec337e6929a8f8ad48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165924 Malicious code in siddheshtea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bfd4098602e5b991515b4466ac7b118257e8d15a8c321b8c1c700e2264009c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158985 Malicious code in madan-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 921bc3dc027d75899a8ac918923f0fd0720bc8ba868ac1108ae893d9882011e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151192 Malicious code in aben-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c0f1c36906dccd8c3680f14e875340438131dd9703c9e6c43fe30f7de3eef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161780 Malicious code in namadata-munaroha-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247367f8e1215f47e41e0909f5c3376f64644cde01ceb5b682e3c3bba9654772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...