MAL-2025-156351 Malicious code in inagi-vumaf-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbddabf60f9a6a7649de37a448d2748ba275d89d8ee5d98cee09b8da506939e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157091 Malicious code in jimmy-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c25cbfde87001f7f45cff8a4b964b8e37be3acf4dbafa93a368f79e2508d764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167866 Malicious code in teagood-yakuna105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87616c537b7c71a30dd6fc5765707ddbc9d142bc7c8136efdd249e3f08ec4efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150914 Malicious code in @miptaa02/reya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f555e866ee0ade359fb443b2f7caabbdb5371a108b5d758f614b4fe7b3f3600b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169900 Malicious code in uinsu-losit-bisaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51216b2089fe1cca454329753476cff1ed0a6369485353a441bfa38f8f079f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154819 Malicious code in ewa-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75625d8ddee542d9844a25c67e63f4c03bbf570737590e1088e0a32c95a205c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151758 Malicious code in aciyua-idusut-dajajuar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02c2deb737a22afbf7459d910d1df6d5d5aaef337959a82c0eb78d773e00c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157809 Malicious code in kuinsu-uiu-vinalimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b389759810716cf65f400936fa538df7f3139ef6d65cd6eb35e3b9b3db9bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161826 Malicious code in namasae-naiuapa-mapoti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492e1370bf920414ef97cb7e63cb6f4330a933d101f87e42fbca04b9e8f5e070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156507 Malicious code in infi-gfobai-jigtga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca352f57a496b9722939e77e77a0cef1cb1ed118c28223a5b4057620281b0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154941 Malicious code in fadila-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652c199e3ad0fa887eebcb55e3970f7dc57f687ce65633e47f4560d395a31d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164915 Malicious code in rita-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a69757c95771d2544f7276b13464e1c46b3d88183ff2bfcead6cfa68b6958d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158373 Malicious code in lookingan-nakomi16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2442ca03380a8ec5fb5853238c65164b067cf579c5b5949e646c65d70567afd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154990 Malicious code in fatidra-faradda-butya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58260ebe9f89109283f95a52276f189cfc13c0abd250b81521053f9b828db1d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152404 Malicious code in alita-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7fa1acbdaafea4142d78831ac0de35b0a66fba13befde89d3f990bcfeb4907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165648 Malicious code in saku-aiu-unian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82f343cb5a6131970dc9c147c702aad678f65e10a84976ef74b835a324f519d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168945 Malicious code in tehah-baut-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fe6bc83e294f34daf83030b7bb2e76c5084bdde1a77a3942c62a84b266db96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159568 Malicious code in manapf-manuta-manssua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b0f8349d1986d09a4c35e69ffc886f4d130df0f31e846911166c4807ac4b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159255 Malicious code in makani-aiaamoba-ufiyvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8635be479449471deaaee05f04f6bd07d7ac068a180a5aecf34cd51b6056a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156092 Malicious code in ifrai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367fd51ca07015844b5eea4e0b38c7b86c9db133a5da4d1e51bfdca19fc280b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...