MAL-2025-165318 Malicious code in sabua-muhadfufi-nyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740a8f0c9162c399c0c3fb95d5b2f25e4fa0b3cb4a83dc33a0074dee5bc30537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164432 Malicious code in polymedr-mindus-buie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5b14db733ffd9d7232328dc5b5b3ff9e3ffa4bba6ac0cf24b35fc3d15cf1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166594 Malicious code in syahlan-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea58671f819ca75cbc500a288b609e18fe1576f92b03047e03eb686cdc42e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155372 Malicious code in guras-asia-ngu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13416713441126c6201cedf49aa25bd88694990fbee1821e73a6e8962bdb1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155198 Malicious code in fitrok-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5c1d4411853c362300317659f464e58c70f364948f8c4492c7e37d1fb23f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161411 Malicious code in nabuf-otgigaf-dofajgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483bab7784e467c873f184257acd0022d7ecafa672fa3a5805c788f9efababaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166480 Malicious code in sunderlan-uyud-vamukaaiabaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4090c532416897ded6d1c61711fdd78007eb8874fc294b32867a94a2c67842c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166329 Malicious code in sunden-dibuok-inuil1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec598b8164bd48ebd381b37ccd425e92b50da9f4c02c14d7d4b037f2eee3ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169783 Malicious code in uinsnu-lumi-kilabarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e968441af6ba51e6bedaed6288a559ae577bac35417c7b04f41eaf53523cf28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164782 Malicious code in rinto-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9525cba6b27cccf1d7147b55812e437e571b6e2d288cc8765eb42b856c6ec7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158849 Malicious code in lookingan-namalaka38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e2bd30b3a02f9cbdd02e5f7755b8a5a27c3cdbd1fad641fd0796341249a23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162290 Malicious code in nokire-akaza74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace68dd817557864a09feea7001e0f7db23a1bd5d888a3e221064eec55188b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154042 Malicious code in cinta-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d9d73add5e2bb22e31cd77fb509794a91fa6ee94c982bef962e430773ddcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161950 Malicious code in nasrul-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be82320730b739e3836ad1bd3b11cb9c200a6a32b753297334bf7c68b92b54e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166746 Malicious code in teaa-reborn49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd41b37d3ccef7bdc50930ce2567bf189faa8405c0e61e6850a132435e10781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150536 Malicious code in @miptaa02/awae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1eb60c4aa9c6124be2aa9d03cf0692d88f89b474242f9eaeba713852f823a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156944 Malicious code in ita-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02837453fc85346dc0fdb91f0c694c8f5c0a938be35503e2f10d904f2f20603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152360 Malicious code in alita-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b6f3646f839ee440e91346aa3532d34c8881c7f44c8ecb23b07572267b08c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157684 Malicious code in kuinsnu-lki-kagbdsasoasdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af77e80899b0f3b791c4160aff2ccfda9eb21aa300c74247dc817a84e3493c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167692 Malicious code in teagood-namakai38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a68fa02524749f958eb11fdb3e6736386fea45da0055a6a7e6004170a6d0b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...