MAL-2025-151233 Malicious code in abiba-alufuai-ayavauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749b187a973ef228b4d9bd3434bd2d48319e5537a0cc2bc003437bb11f9497ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153125 Malicious code in avminah-fagimas-foafogfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11adb0459d55114c901a33fd67bc06e8a5f41ec37c9765adc3967c14d44a3bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162789 Malicious code in nokire-lokcek35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1483dea53ce65da1654b1f723c6d3b09027334bf23fb5b8203f3d21725dec6e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159909 Malicious code in mansioda-nodana-munfungu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e1cb1c6b6b87f6d27910b102d2866b56d593e2ece3ab8152213b7a3f5b9964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155562 Malicious code in gurs-uyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4ca2a2103cb896e9bf9aa5b5395e6b67c237b6e167679a1b2f6e100b40034f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163443 Malicious code in nokire-sekiya52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fb684ac595b5db112d6fe5406703e610aa8484793983878dd123b138e0d192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155906 Malicious code in ican-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ed1992ff41213ad63b856306289da75b4aae10905cdfe53416ad3de3717af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166604 Malicious code in syahlan-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b5e3b38406d966057c1811920c0198e9f0e4e3162f2e7bc64dc2824be6661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170447 Malicious code in verify-tac-mehnal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dfe6085d2dc622f40fd183b692cc8ae687903d0e2d59fbcaaf0b78a2243aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157846 Malicious code in kuinsu-uyilu-vilanakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7295ec4f48ef086c60a4683ee58b9972b446c89b9f7fe36f70efbbf6840b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155126 Malicious code in fitra-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4229845ed27d18cdb273f4952462663cceeae86ce93393c7170d5a00435141d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167952 Malicious code in teagood-yakuna89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c518eb9d0649215d27a59c4f1c162942708b18b80c3f7446f3b938bf2799c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155771 Malicious code in hariyono-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687d71ae38aaec32ebd6382595d9b950b260cfeb94e293e9627f9651f066c819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157642 Malicious code in keyla-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82b599b8bf72203deb48bbb7f42a04c232e45c2a926912925fa3cc81575e606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156067 Malicious code in icha-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fbd15fce2313e73a82dadc511c7da75de627741b5bfb7c20ceca872ca05497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158238 Malicious code in lintang-tea75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f442319cd9f3bc3243579b6789d4a624e35751abb8cd1383dbf7ae9dda7b4e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160082 Malicious code in manurung-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c923ae79b06d97c3a9f782057623324be79b9e0fa7d2e179b9bef189288d1c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153458 Malicious code in avminsah-afigafgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687f30baaafdfdc1d45779bc6fb2adbcc6353455ec1437eba91fd2d37fcff0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-ain-sulapabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb99b572338d5a9a4507e92e1763935ba0fa91a93eaf092a40493b8d01644049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163183 Malicious code in nokire-nana30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de1d930e4172b58b8aee7a8dc5efe8aad84cc2032dc324bb7addebbcd4359c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...