MAL-2025-161414 Malicious code in nabuf-otginaaf-dofju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449d912b28ad85e60bd13452f17170703dfd18727b881b1a572e37b1a4aaa908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159110 Malicious code in mahnud-nofty-mutafafgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e0e4603a17e59ba2c00409592f8c9bfcae7a980be984655db4d0087f1de0ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168090 Malicious code in tealove-aruma34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cdaae38ed28611ef433c570f0da92fece68fe3127197846f6219d739557830b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151952 Malicious code in aibopna-mobiule-aruianaini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0468a5d54949bcd16804620f902144257c3e2ce483c4e4f1b408a39705b502c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154544 Malicious code in dian-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3f7d5fc8b82ac07a1c56c2df64bf822b4fb86a49c147ed3675b2e9df2fe8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164288 Malicious code in pitra-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ff4396a63cb285bcd0b848a63e178db17af12fecc1a1cae51059f5865ca1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157168 Malicious code in jurss-gasasd-14s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e5d97d87cd09c7931da47f1e11e7708b9d6e341634d20af40e75966e1c1b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166521 Malicious code in syahlan-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14287f2ff65f940ffd2f2d6abeaa0cd207d6935dcd5fa3528bea642b7027ce96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169448 Malicious code in uafagarug-mie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1567e3d9a7fb4d215b838414cba9cf0e77f074c214b5046e61a8c60f3d1d59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162035 Malicious code in nasution-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e720996f55abe258427543904e19cb6c9fc85d458e89209c4b81b8864a173c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156671 Malicious code in inufgi-gotma-anaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c51d38eb00360d26658fef31bd2db5d9fca04818e5673e8599bb298de35b128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159077 Malicious code in mahnud-mgufuf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2239f6b53920815213cde20048a4ac3e74059d16b23457da80bd2694f68bfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152124 Malicious code in aji-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdec47942174cf618e9d97263be9af576d44a92c96a39fd0e21c7cfcc2dd184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151274 Malicious code in abiba-avi-aua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60b791ee83ae4bba05dbdc0e67e512c3e5e4cdad738c9cda283a8eb8bf7a6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150537 Malicious code in @miptaa02/awaea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b8e2db1fbfb31582b386b8e3de653711cd1ae16ff97fb8c9cefe5125ede3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156111 Malicious code in ilal-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1069fa97ff0ebff41a8693247755604644aa1bf201117ec04e34396339d0a48d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150954 Malicious code in @miptaa02/stupid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 907c8c425aee0e4000f13c6d10b66f0f5b7d20f963278774ef94765e182fff90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165318 Malicious code in sabua-muhadfufi-nyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740a8f0c9162c399c0c3fb95d5b2f25e4fa0b3cb4a83dc33a0074dee5bc30537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166038 Malicious code in slamet-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df461df2811234295296a44cce6310c778c083ee02c2cdb3e2c87052ff9cc989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159496 Malicious code in manaf-asdsssin-muaanst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b787f07fa0c4614e91d9cfcd40d5f18da6b99ef187acad9840a1d1b3c3fe21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...