MAL-2025-161657 Malicious code in nabuf-otomabin-nojdsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89983dc8bae92873ebd93e4ef872c4893a5ed9345cdb4880a5df2925f2ccfa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150561 Malicious code in @miptaa02/defhfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fb16c17110305edeeb4d8f4db8c516969d96092c2918a7b7d898801982f06b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163124 Malicious code in nokire-namiresan69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 246ba4e135974c3e604f8fa16a0e5f09c3d7d7c0b215fcaaa74f7a0ffc82345a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164012 Malicious code in parwo-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be543d4d943ab6bdb9c26e1c95884713b9338f280f05f03b62b6e615b05c507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154790 Malicious code in ewa-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2a301fcec12c2bfd5a73d73fc13d3d4737e3bd242dd9320e629107dae5fc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162729 Malicious code in nokire-kore40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0000140c3a3bc0594deb109b89a13656ce69ce9dbf86493d793103fa04490d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149967 Malicious code in @mipta1/awasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338f1714abf3a01a4588048ae55685727ad310d47a6244381f99992839964fb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157222 Malicious code in jurss-zas-dsfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b40919bf44d40b1f92a760fa17012dd21732055ea1ce5d8ab5316fea07f0467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168236 Malicious code in tealove-dana3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a16d0f3974e9f0707689185a277637c3d97c25caf33f48bef5845ad32694da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160984 Malicious code in munya-mipta-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5397778ad97d081aea686981cc0bf2748513f05f011c2db961cfe2db2c3a713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169386 Malicious code in tusaaya-s-wfesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a8d725e52f179be1d2ce3495775ed6f7408658f60ae582cb3229728948618f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151220 Malicious code in abia-avugi-anina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1840b4e176e64c0612427263e85af96f2ec8b8af81e87acd43b595e7ecfb054c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abia-avugi-anina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1840b4e176e64c0612427263e85af96f2ec8b8af81e87acd43b595e7ecfb054c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166731 Malicious code in teaa-reborn34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5fa600f63777987ea8ce7a8f9a1e59395f29900e899d2b326b592a48c1f4d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166348 Malicious code in sunden-dilak-nulikanuian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f311160e642cedfd8e7d98d0572bd3e556e0f878201ca6dc057727107c80b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e8a7f27752f87bce9a22fd1fd954b75e034c966ae8a9c2ccd48f100012f17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160763 Malicious code in muda-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9db90610c42f52b3baabf89f3ad02b5ac6e80d25d2cca85f15c5521e66ea27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152937 Malicious code in astia-ala-malikaoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a0783b3fcfd135166081b5219de084ff2081348001cc26031e1c54b126e02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168794 Malicious code in tealoveness64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deac4e9614bdbe2c29b3329aa897fec960313c61f8554e459dc640b306813c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162885 Malicious code in nokire-loklok32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf974dca97f88483299d85096ee75dada739746a715bf1cb71a145f9b38124a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...