MAL-2025-166671 Malicious code in tadasdhi-nilai-tesru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7dc282a605f23bc7af8869fdc473a8c8248c0418a58aeff2f466daf38c67ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150871 Malicious code in @miptaa02/ntia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934a11c2712b82b47e98a40d1545f803069e1f86e1a5e25fc2fe277ec7697b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160728 Malicious code in modirai-imgono-jinmnanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547c4af43a816fbf8f7406359b9020b2b8c7ef1dc840d588b939abd0415e2694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155583 Malicious code in hafiz-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616af81b86d0fc2cd48de0375834fd55c74e1288063aea2b60e5d17fb1e837c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159337 Malicious code in manadi-scavior-dareena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d381e9881a058df4d0354af50e826023cb0c0a24ebefaa2d65fd83e1b495d833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155409 Malicious code in guras-ni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 253a0cfca0f7a00d1542e61d20b1be1a22df1d8a7a9d6024b41dbf3802aa5545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151297 Malicious code in abiba-aviun-abupmavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2a99b98e4ea771bc07df641fdce337e00a58b4d2698203026433b9fec6d66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156262 Malicious code in ilop-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa471e5a54a351be2f9471640d90aafeb53d317765227fad51573989f840e342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152088 Malicious code in aji-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7782dc778dbf5c024e6469cbfecf49aa637d756f571f706a8b79607438398e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170039 Malicious code in uinsu-lotsi-banali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfddd21e03fba1845160b0b9728efd05c69a9fcf9470240b649a5f2942b33bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156030 Malicious code in icha-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4175cb59820d68fcaa8fbe49f43bae4ae630f154bbde4a1413a19eb8f5082b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164763 Malicious code in rinto-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e00cf79ad2958261c2a7873bbb79b5ad3e211236cf9776c21060cfcce4859d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157676 Malicious code in kuinsnu-lki-kadgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445db79098adaf31db5d1abd6bbbce22ddc0015b7c7a1aac939c0ace16fbe088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165941 Malicious code in siregar-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d6c48db1f05e68a38c41356edcbf8ac0ec4aa604bbadf088fa28799d1968de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158508 Malicious code in lookingan-nalako93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041c22202ca8e0d97ee3572cace72fbc77e487d83e2cc16d19c2419dcc687108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162112 Malicious code in nokirane-asaiggfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fb39025ff9e6bca3a57a5dfd4eec801d2b0b601a97e0715a76f44794649a90d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166300 Malicious code in sunden-dibak-itarukinyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70704ef355147d6f382cd77a88689266a48666c9b9c3ae23e281dd1eb5bd2a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-jabbah-elektra-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2feed5d5984cca695429759e5e8f913ea156640eefaa638a116b0017549eb39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-materialize-proxima-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad786dc16177a4cd5009a59ac2e5b60390ff2ed67a4972b4194d5e84a0b9a041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139959 Malicious code in bellatrix-titan-eslint-config-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a7feb3c4ffa3c82b81a27ccbf2b20e0f1e93df88dcc9fca20cbc9c42eb9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...