MAL-2025-160390 Malicious code in messi-urfat-dissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01336e8a301b28165d7343c2fbd50e79d65d8e5ba22c59e47665317077e948b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163926 Malicious code in nutr-nutyui-mutriao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c6e05da7515e648d113c624569277cd1bc98f3cabbbfbb0a8b87855bd06318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159286 Malicious code in man-nonatai-gag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8c90ce0aec5046e76a53af23f6655aa528198a375b498c61dd10f82612b346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153755 Malicious code in bini-otaima-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3097d6973b257e39795f409d51dbc7acbdbe396e76536bdf698817aba709fca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152482 Malicious code in alvira-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ad5ca215f4b2a667cc4dab0088d9e09f2871dbc2c69dd19e194a1bbeaf9e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169636 Malicious code in ucok-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae8a31c425a95d148a0cb661d598cbcbefc4d6b4af9fcb2dc7ecd40af732079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160736 Malicious code in monadi-nads-ka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57aad40cb840687e091c482bf1f66aa81d3ba5c84e3697f51e7deb97027b5d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153519 Malicious code in avomainah-fragis-ouda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61af3ab52b99b181963a589f178cbf924d3e9610e93e1e6d628528b6496b0a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169203 Malicious code in trevora-cir147 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cc225376397d38cc42811187cdb5754bfa954fee0ec345b394e70c7d5f2836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155991 Malicious code in icha-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0638eae12e41420169d6576544c156da73d1ed0513d74848c5f6008ebd8ee15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165991 Malicious code in siregar-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057743918c3efa85b4a0840ebb9d196a465260cb1528e737edda779bd4cd5149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149942 Malicious code in @mipta1/asdfsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba44668013ff73de26317f90619728330585937f42c0f6fce3af5d960f48fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45efbf7f325c41d25794872b80035626ddb7d5e3a41363b143297b30204f57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4927963b3c52c97d901e87778208a98ee9b6fae25d65d5a8e439b09722f5bb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60fa45f766783da72d01780566f4e7fa0941e9ff6bd5ebee617b4bd306f3dc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kaboloki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10081f12a3739b7ef59fea47217f68dc3469266d228809c6d7847bb0f1bb9d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b807f9fd61e2cb3e4d917ec078a39f743cb44d7869d9a43ad6a2313f506e780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf5cd6c1865073d828a89ff45c10d8adc0689fbf62000c3cf8bb684f68643fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabulanuli-nalaui-lubis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d5632ed26a86f147297f925f173234824bc2f149e7d70671e70e5004dbf359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dec0a0169bc1d93ce4f852c39e899106f8aa02142cea27eb852e7e2ab1a482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...