MAL-2025-156733 Malicious code in inufi-gfobai-jmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8064a6410ebf249f1d37bea935e2db7208d558d4c051b10b2312b468b8ce1263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162691 Malicious code in nokire-kilua96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676b84a3c5de5776cef17929f377ae51178283630ad186650d7f92f1cd7b6e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157508 Malicious code in kentung-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9664a4faccbe937ca90c56f7eb08e5254f330ae5ab46d84f6ab42dbde9136b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155647 Malicious code in hafiz-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2cdc9fb20b368c7ab154e3be53dc229efebac2eab86af94c92f3e1208162179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161378 Malicious code in nabuf-oguuof-dusuhaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe2dd56e92733260359449578b9dccd4b602baa171910434e3ce6732e8ef25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152654 Malicious code in andriani-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70532487070f2a0deee8b4bbc1c74cc67b053870890a96f56fc6f6daf60b7e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165883 Malicious code in shilang-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7214031234143f8d06ce0a9a42e15d0b724340ecb8bd3c394823839982de1a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165866 Malicious code in shilang-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db14c9c684d22cb9405c593f151764950acb0f10a9be3d42fdcc2d53444f415d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169189 Malicious code in trevora-cir134 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3ed261c3a0e460bbfccd95325f056acfe0ceb16df978cb4c12f08fb39d6d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153863 Malicious code in bitha-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e75457450d6fc8e4119e06008b46b6265fec2d37b7f2d3d5334283441a92a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153699 Malicious code in billa-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77151b456ed3fac045a35b1a85e644519b65299e4b345a42d8c9933ce27b5b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163790 Malicious code in nudela-ofgaf-gafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5da9cffd8b2736f34e1eac31888665e94be76a350fb5292edca1d155d870904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159985 Malicious code in mantu-rol-gagak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e27ef74107d5c262cbd80b429b738706b3627b5478afb288d971f0f9e2cf630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167001 Malicious code in teagood-lokina37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cc8167ec09f9e86ea80259553fa8c4b9a789e3178e772cb21da9fcdd814137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163657 Malicious code in nualea-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9da9afe5e170f04bffd3e595d27e14b44db6b6a8e92df99ddfc81987f386e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168128 Malicious code in tealove-boy22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c012863103bd479f2422f4b6e878abbb8c31a742f05c7876e8b504021ee318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150785 Malicious code in @miptaa02/kii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0959beb6f8fa6d3bf3adb719d79ece4c3d465d821de5867bc0f2ceaf4d21bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168435 Malicious code in tealove-nameka9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbef84558da1d587f9226ddeaf8f9944187e17bc47bc3e8f834d9d0cee91ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150556 Malicious code in @miptaa02/dadfdia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7430ec45b72a6f4675d945029820d2d7b1e0738f7752c19650f55d7190b00e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167952 Malicious code in teagood-yakuna89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c518eb9d0649215d27a59c4f1c162942708b18b80c3f7446f3b938bf2799c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...