MAL-2025-160919 Malicious code in munir-nautyt-nublies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 027e85eb730adfc75f5d3bf18307891700b1d9c90d756be5e5fd670417180322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150713 Malicious code in @miptaa02/iadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ddbcedcdabe331ff3f8d71a054722689d8a23f6ba7410f3a4c8d5399f675f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152951 Malicious code in astia-alabki-mojikaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a12756b909e73efd2021f1a4fa45278569bb7ec03c6c5522a1e4723667c1ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161742 Malicious code in namada-kasito-naga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91572e84d3c2f13a337e11f615414f850e595bd35ef38d87b1867b61c476028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162668 Malicious code in nokire-kilua75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86c88db16e6ee0d16cbcd2d910e08b232fbac861254458fd5a08cd84596d019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153655 Malicious code in billa-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f36ec37c769a4920cae5fe22932b4ed1c47499eecef97eda400967cc0df043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154987 Malicious code in fatidra-faradda-butfsdya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97fab9d80fa7e561fb4a7b8acafc583483e92a8f26c98aad5c1f694236c9f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153766 Malicious code in bintang-tea19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8840d6e409a6024d7c715aecda69849daeef0eddd9fc69710bfcdd74f821e590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156040 Malicious code in icha-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21c143ab681f44645ea27f37fe38494521aadbf037180985bac225ccfa54c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156164 Malicious code in ilal-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922ee1cff8e63caf6ec82fbe27c4f2d94afb5e8009cb96644ebf625f77100e3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151471 Malicious code in abiuba-avimun-abupumabavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a6ef39ef4c88107f6d0e60e793bdef3651fdaf8a9ca992f3855e67bb9ccf0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150184 Malicious code in @mipta1/qwassa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ad577539efa965c9097093769b6a3050f904259df80375a165f71c446c8d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153695 Malicious code in billa-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf39a9430b8f13e3589f37579dda2c4534a21ba132b1a9c673aae2a63c3f10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170028 Malicious code in uinsu-loti-nalasaublui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9afb64998d89fafbec7f3f31f401fcf208ec62f5e7c4226daff28da85e9c1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161690 Malicious code in nabuf-otomian-djau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b5bc616fefc273e784560a66e3bcef9893fde49ece17987b5b290ab71ae4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163678 Malicious code in nudalea-fofiri-agobur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070cb4466c1936e803977f47f0b4f10aa9d12f2f80f4f09f5778197c02f5720a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156362 Malicious code in inagi-vumafe-nauu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0ffc18aab6a8720908634b773184b8377958efdc5cd3ef5316d6403a8fe815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150934 Malicious code in @miptaa02/saghhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d53a80a3596c3a563b00fdb899acc0481e27434e729df0557f91bb93def18e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-cordelia-neptune-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3d9a9fba927e5ca91691c321ca12735df0f533a460cdd3bd694d732f2b364e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-publish-sedna-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a03fc8338b4b798f1a5808c0388729affd3e1aaf3ffed404918845befbbdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...