MAL-2025-169431 Malicious code in uafagarug-mfie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c454b75b66fd77123e67afb844b9ddfb203193877b028d175c0831a351876c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167673 Malicious code in teagood-namakai20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65fc1dabe99d8ff52bfe7a7ece3aabd505df0e9b07d1243f8ecb0e3faefaa0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166282 Malicious code in sunden-diak-nulikanukn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfb825c49352fdfd7a5a5af5a5abf062fc25680d6b6dbf0fa9b337e77b1b6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164683 Malicious code in rino-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bceebe5371f91844061f05a5952b3cc2621b5d91f76fbc2f2a3954e2a3b6931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164646 Malicious code in rino-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3ad516553f1ea5f6a4394745167878daa89713780cc7e72411daa4ac520365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150543 Malicious code in @miptaa02/awsdsae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48dc79be4282c25e00dfc98f7f15d9b785131bcd67559a402574222eec7229e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152674 Malicious code in angin-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09b1ead62ef801b78bc73c642f7fd0f68f523c5bdf2ab80753cb75082eb9779 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153529 Malicious code in avomainah-fragoias-ofu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a916627623ca9ed2cc64ce56948ff844b525b7017e9f942b3d55662219bf2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157660 Malicious code in keyla-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a683227e835b2d61c169225ef6dd59ef2c78148b970b9725d2b5070d62aba85c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159513 Malicious code in manaf-assin-muanst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd47c23ba4b6b85ec3c435073c2f8e736f653971a353887229b69d1b5e6f56c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167323 Malicious code in teagood-nakamala57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4976e04980f70f22976b80a02c2da665b429ff31bdb218a662c0e08fcf82e401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155658 Malicious code in hafiz-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531d0caaf2cde354766f7e1b43af229d8ac8f738d7f2d0e39bc02c00fb3dd1aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160524 Malicious code in miracle-doki-uikayanabki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b62a903682843c420f2aee9ee54b9eb3a54ca3985f7d65f1dd01198d62ef2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162100 Malicious code in nokiraifine-asa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920ceb9e1af3212f1e43692cc10e81f23d8020df58c2321389aa0422bfd20c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169038 Malicious code in tehah-nutawar-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e463f134bfd7839ede8ab9d5ebff1713813875eb0a670dac7e935b2d3195e350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169213 Malicious code in trevora-cir20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa48e649ec28a8f8d50738abdf7ca1ff4e36cda5320a4de9345477a0ec95d5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167589 Malicious code in teagood-nalikoli35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f976ccde8370d504a18fed470f37bc74dbcb937a625434965d0d6f6d3c671094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158032 Malicious code in layla-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ccc01907776b77ab49575d023075d4bc1f5debcc5c59f30046bd4a6b6284ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163876 Malicious code in nuilava-darae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52973fd5bf86bf77de47aed952646e81217cb5666a4b48763a1cd7517ea908d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156343 Malicious code in inagi-vuma-nunfubag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e310d7365f5e0bc0cf455be8feb8b0cd4f8ea0f22c3c19cd57eab1f7b1f359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...