MAL-2025-161629 Malicious code in nabuf-otoin-agfgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934e793ed0e582d7456fc3e2e93cee51f848d31a72dc4896f1dd53915462eca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167859 Malicious code in teagood-yakuna1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e095dc9aba301997cacf886a86c917787d509350d191c46ea3007c091385b8dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150495 Malicious code in @miptaa02/ajyib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe6a35c832cc9485e3fdafaf06b3ef37615f91b93deb4635f1665d360d25750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164735 Malicious code in rino-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a3ac71f7a84929071f3fe3670b4acf21455bf2e739cd06710c9769978be8779 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150164 Malicious code in @mipta1/mizdcs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46b4e6756b2c77fb244d319962ef1501806360958a23ba8a15273caf371a4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168867 Malicious code in technical-alin-tubl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e531074a7a6323e9c952cc78660460dd995e26ea643d084a6f702760a34b8c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151745 Malicious code in aciyua-idust-dajaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed33cb1c4ffe2a0cfd259f35a394a0ccbb8d7361ca2016f9822a6173cb008c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156781 Malicious code in iomodra-foruai-aunai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b32d31e981c1f83c47ce2fb85b69a1458614ef995e766804565278cc9ae430a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159813 Malicious code in mansila-tiaala-magolani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b66018bbe037de700dc19ad4ef441c2247e185aafac247c50a62a0142bd99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158058 Malicious code in layla-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e2e6f969ad1b968f6de30d4235077e2ecd23c20904ea1dc6124979550dda49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153872 Malicious code in bitha-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79920f17e17991b4378fc2230bc9cf83ce72833566355b1b3610fce86620fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165123 Malicious code in riyanto-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3a8c488566dea543440f631f560d6f0a47563b00e90cf9d2a458c350beb09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165173 Malicious code in riyanto-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6224b6f024619bc3d1ed933f5a7af9db7195367481c0aba92d6997a114e4d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152092 Malicious code in aji-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de1074e28de0371d8ebef41a4da1e01b159b0c5ca48593b3a2dd71e481b49d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150371 Malicious code in @mipta19/gfdhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00444794c5437afbfd257a6caafecfcdfc48d9a83699df291e9872ed0ad62cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165918 Malicious code in shilang-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8b8463d1e62de5b5aa515ad42550397b74b15d8843509d93174aff9b132141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154264 Malicious code in demaf-saintfea-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e8455879182b51b6db759a83d077fe3eca615335665048502d7febc3c158e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151811 Malicious code in aiboa-mioliupe-auagasita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20675ff85c14eee27f23ac16716e744d137ef3de4cb1a75ff5649626b2be54e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157839 Malicious code in kuinsu-uyillu-vilanun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9749c2b0ab9225d3fd7866332f17155c2e8237a989b6f044eda308eb0cb8313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170519 Malicious code in verify-ticaul-bisusayaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca94b3300d2b493d333887abbbf45771aeac9ab681db340b72a551d3bead43e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...