MAL-2025-154375 Malicious code in diago-kamoi-liuima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b3a36fc193c0b58e68178b292fc535b8e95ccfb41189df6d1d542316b64eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165112 Malicious code in riyanto-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f1276ef60132fd4de41680b77864b69d286b859d696f0c1136a8f95ea895fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155436 Malicious code in guras-nutra-mans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58abc9292ebbf6ba9d7870c08a884e71d9e5e0ce85c9cdf7eb789db01bf2ae77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169213 Malicious code in trevora-cir20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa48e649ec28a8f8d50738abdf7ca1ff4e36cda5320a4de9345477a0ec95d5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155945 Malicious code in ican-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9991c0ef9b3242b720fde3a7c135c2313ba1ea9235c3d5018a30c5d5fcf2d100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150175 Malicious code in @mipta1/paso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3eaa2fb890fcfadd69a09dd2cde3ee9768c1122ed99a7fd190c971acc071fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158797 Malicious code in lookingan-namala81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f888e42ba6435c2ec04ec19a0811b8f217998849bbb8abea9310f672d9035e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153975 Malicious code in buta-sf-asfh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2718c2803b97218eee4397d9cd441bf31cd83d7a8304ee52a6223d1d9b4649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150093 Malicious code in @mipta1/kdadds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b240a7f5c268572345f7486871761114dfd600c8b2f36de3b3649ac51c4b53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161533 Malicious code in nabuf-otmbian-ifafonabogof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e3ec37abe9855873d871802d14ac68c5e8ec60014535c3f75c1a28ced4b7dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165947 Malicious code in siregar-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e4002c7cba14a46eb049071605169f76b410060aa2f003474a7f3f61a7da65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169381 Malicious code in tusaaya-resd-wfesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61eada3bd2661cd44e227356f798925695f035570bbc415c2b9ce272329c9d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156343 Malicious code in inagi-vuma-nunfubag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e310d7365f5e0bc0cf455be8feb8b0cd4f8ea0f22c3c19cd57eab1f7b1f359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153876 Malicious code in bitha-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d000d8799e31e381c45f7c8c426f3645fe93e87b03fd61b83c2b93fad0b88f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160565 Malicious code in mirai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c534b9f9fcd038cd21e2a77eecb8fc104f8ab26fd0df8cbffa2232bd4be7cdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155041 Malicious code in fauzi-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector affdae2b97aee924f4833a2b8c24c4ccaca459d58f90e0a2de27f42b880bf8c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169039 Malicious code in tehah-nutay-ko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256df9b9c7da58e8b2c1f9a9cae09f2f176b88c7c837514d8cba2410abc2584a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160594 Malicious code in modirai-fia-jasu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d0b1c02f18e37a06a63ba8be4a951c27fbc0578f07063dfce0b84559c401ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154338 Malicious code in dia-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f081bfff41ccf89ee951fafe636555c3e86c6c719cf6ace4ed90c41564145822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169376 Malicious code in tusaaya-0asq1-wesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e74ec88ea78b2858dfa1dc03deb103be36423c1cbf9b62a807f83734c1376b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...