MAL-2025-169968 Malicious code in uinsu-lot-bisabyuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9fe7f53a205b339a8be7ad309af80f18714e32d69491929ffa34c6c9963358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163704 Malicious code in nudela-aaff-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4c21359c697e9de89b31e97aae845dc664afab3bbb27e21360c938a75986051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150597 Malicious code in @miptaa02/ewghj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2fed4973c713e529319aff36f07a33b9ad3a0458f9954ddc0ed3b177f4dd5b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163366 Malicious code in nokire-rara74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d48666a7c33cc10c87fc1bf9b3e9850ebedd57830a1b0f3230417ba7df7e95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166410 Malicious code in sunderlan-ud-vakumanaakuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6daa7d85c115c976e3d65434d6f3355160cde324f4e85e4ff71756a3aa5d4f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164399 Malicious code in polymedarnan-nufati-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e03627cbd17ad580c44ab82c563b41928d6953f0238cf4d6ae1b67e98df80b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158882 Malicious code in lookingan-namalaka68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a76db3e400ba25c87c3c95fee9c1cb5a34f10196fef72509a5c4a1ef57e367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153922 Malicious code in bufani-muyu-faafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126853e56b8e3bc0274cb6e1d83dc989d1e8257be867fb0c147319d78e67038a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159680 Malicious code in mans-manapa-nutayigd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b168793c02eb206610165fc6875e2f5fa77ff21e49372194ac8e74246669d089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168995 Malicious code in tehah-miss-br (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a09a93611d5e4e6ef96574356f2e84196488c2f846540f7932a60655201e81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157931 Malicious code in lala-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666b9c68a57017e77a7bbd80cb54c1170283a7468ce4b6c98406cdd924f2c13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164592 Malicious code in ramadan-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77ef71b81fbcecb38c85e474cedc0ff6c98fee62b2d83a4be5045a9735a42dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154896 Malicious code in fadila-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee088ecc851159a2e4c482fb4ad70384cbba1597db93f39882efd164197bac86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153975 Malicious code in buta-sf-asfh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2718c2803b97218eee4397d9cd441bf31cd83d7a8304ee52a6223d1d9b4649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163238 Malicious code in nokire-nana80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71e7ed4cfeadc3bfe54d448f0d0f70cfee961b652fe4d0d3dc874b5750d5cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160861 Malicious code in munidr-nerf-minsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cad8e4d2b707a77cfc5408e3a148db5e70482aae82dc5055da39fe23a1ee189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152406 Malicious code in alita-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b91f11122d05cfeb0f0a2145bdf5126a17b49ebea9179fa5516134717cce627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163795 Malicious code in nudela-ofgaf-gafjaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e4c56f65bc171cb06e7f3a28e6120908a6795ce6e446557ca24ed005df22c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151050 Malicious code in @miptaa02/yyds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8f2e776f31441b732519e14b7245567940b4063be9fb49abb02c9b9fd57271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161194 Malicious code in muyatia-nitu-muytio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd85db0ffe2aa138bee9f0147e4f7401e42efe49c6347712ddf6730c09a50920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...