MAL-2025-155856 Malicious code in ibanun-ota-umu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea1e7d5932d7d570480cb1b686d8a4e4594690f59efb3d56a611e2b44194c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169208 Malicious code in trevora-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52931fc0b3223a761d7ee365700cb73c493a43ed2bc3fbba84d7e2608e1db49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160202 Malicious code in masiolan-of-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e79ff0efc084629248e235766337e1b1f0238a4b5bd04b5fd124da61d608d0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155897 Malicious code in ican-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b88efb25725f4cbdab3be076c8cd1df3b6b9033fea87a061523bbc7dd9d4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157779 Malicious code in kuinsu-lukoi-natibab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5804b0dea4c610b4b59c9ab807986f3eae8cde8531cd725d7ea2d78dc21518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160871 Malicious code in munir-butssdya-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094a2aa908a746c3b3ff5a5e006767608a6e0e63e62df177c6921a74e00a1d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162861 Malicious code in nokire-loklok100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 238e248d802d567de8521689c9fe9fea52c984747759a9cf621dedf4cd1b8254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150551 Malicious code in @miptaa02/bmb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 717d0f628a5fc7ca2dd52069ae25ca92d7f25ca2ee541b81a3a631b777fa7396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165913 Malicious code in shilang-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afed44884dca3bf57de334c1cb193229bbc51ebd380e78ca78eed3a98e2c846c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157687 Malicious code in kuinsnu-lki-kagbdsasodgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d09878ecc2bb580fe05c1fbb8ef69ada5aa5e4d204db361218f79afd90d802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168932 Malicious code in tehaah-codfd-mianusrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76f4af4d7944dc7730fce0b7e43bced4773b7b802b63d2df539f250132d6258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154492 Malicious code in diago-kulp-kabli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6334dfac173a12df837852d72cd42a4917d6be00096cca76da2a576cfc5a360b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167586 Malicious code in teagood-nalikoli32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2e3badfbc692f93505e9b3759f7c5394f8c8c39acc36bd37f636c0fd9e1d066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159253 Malicious code in makanabi-aibiuba-ufufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68280ec25bc3134d30e84943bfe04c4e45bf200f767cde9e3e8dc6870eb8e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158441 Malicious code in lookingan-nalako32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96869e83e9438fd35d178d8eb5f0f51467d3ae4fcce7432a35035b4daf27021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167457 Malicious code in teagood-nalikami56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2769f215bd2a3b7e915636a4d93ade930afc69fc94824da817745f18e4423262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157330 Malicious code in kamasada-nussta-buadadanto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a3ffc64032fabca63d80bf346b78181f8c1b9e8435443e2bc1276e94ac36a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b2f20e912d1754a1ea7175e454298ba45f5d770d2425bc29370cc60e3860dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otatu-umi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3083a47f6c49af4f00396ddccf05ba1adffcc400e88f529d85d71fcbae842d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d960c87d258e85c0a39f477e9f56d5a1599109df67dcc13c1bc746f8d4c885e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...