MAL-2025-155331 Malicious code in goodmanmax9250-cowboy-noted (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f5aa0b9be9537a57954471914a8e744123b1e04b50d130963cd68f1a487b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161044 Malicious code in musnisdr-nuyt-musast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0eca39f3f5d5439c1e26d425ea03d1949b1b4b6095f366d33b837e5577c0af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161573 Malicious code in nabuf-otogamafian-dopohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361061036eec53eaa54e0adc3a75c7030cf25a6c23e1fd3b870c44c639ecb7b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158866 Malicious code in lookingan-namalaka53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9808c973ff6a9165fb94a70ed50c96a889a1943a11dfd06ac817e7f4384c0593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163595 Malicious code in nokire-zenitsu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea2ce0aa0e345e521dbcef9047d946bfbb930294f8f3cb08ebe4bb620637d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154802 Malicious code in ewa-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4592e9f4c286caeb521f0ba92fd66a24b3a1e16757c884f5d5387417dba1e6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161676 Malicious code in nabuf-otomabin-nufgfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ffe8fb16ecd341724ddfbcb063ed930e402f2956081a2466089344bf5a70a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166142 Malicious code in suharta-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45da3f9ac5e03557462eca9fed58c590e4f612a3333ee984b0709f49b1d884ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169186 Malicious code in trevora-cir131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6451cf979834e9ae00cb79cdf882f6f730b3431b7475ef37a18c53fc1f811f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151171 Malicious code in aben-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3adae7c76a82576585e8844138e6c27550bf67f4344a140f647bd1b469ede8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160735 Malicious code in monadi-nads-k (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9230d513fccde98ac48ce1d107cfea052c4e0523f6ea9288ccf05de3ee3719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151206 Malicious code in abi-alafi-avu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f626e826a25f77f529eaecd5bbd90f2f0b55e61b5e18b569cb792cb224ecef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164769 Malicious code in rinto-poke115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1afc31306c55156da72326b6d39835fc31da3413e78265001aa26b5d3db32c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156481 Malicious code in inal-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e0eecde63b22025bb574e349aa077c2f3daeb52209e486092c9cfeea8925ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151220 Malicious code in abia-avugi-anina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1840b4e176e64c0612427263e85af96f2ec8b8af81e87acd43b595e7ecfb054c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153106 Malicious code in avminah-fagias-fimokafiguagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf9bd5395f960175b979d98c83b4d8a5fdd4e5c6c191b4f835516ae4d433f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163302 Malicious code in nokire-rara16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfba69bae657a49329c55cd2adbc568c411bf703f7ee5b32346a55c8eccfa5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164552 Malicious code in prayoga-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43cae9f55120652e39cd0837ad970f0418bf307b4ea49adb5a6d62c9d29a27b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150576 Malicious code in @miptaa02/dxsfxfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c84f91cefc6c46c190b5d17a0972f3f9ffe21231c11e01bcf10227a5bcb8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160643 Malicious code in modirai-igiamafo-jagagigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90003ea76c2e50d5c6d0083007d2d8f3e2fc93ef324596dc4955ff0a47dc69f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...