MAL-2025-161688 Malicious code in nabuf-otomian-daju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a016a08d7a674076314810ba64fdcfe05a13bed8ff35f86dba9cb3c3edd7604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156003 Malicious code in icha-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df484e90ee86d0283a12b714e53f3f480c2c31ab8cdd349ad9ac562b8420987f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159610 Malicious code in manda-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e37e35407ee8f6d8be71fa71774bbd2e93a82bfa45ad4315ad60cd81903db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170219 Malicious code in uyaudtu-tayut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe7e54b0976baa41bbf85fe42c0fdbeea5309eb6cdbd134c6ab41a311383f3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165627 Malicious code in saku-aimaku-umuilakoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e04b385bb825c14104749f2fcd557086c5fe8ab1062e13002401dcf6a39afc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154396 Malicious code in diago-kamoli-lumahoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa615f3db7877cd6ab5b0e3b1491e20523474597efe63579686ccd2a8f3c9163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165544 Malicious code in sabulauli-nalaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b78118da387316705f9e0ef891f3419c376177fe0f581f0e3d6fa500db18b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155336 Malicious code in goodmanmax9250-forget-grow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1414d8718d25bf5ad9c278743476087f2d3560c4437f83991256453a1f7bc41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150793 Malicious code in @miptaa02/kkbhd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef1edbf3d48803a50c9d7ec887ef0cb5a368461ff0d2363d3ac7ab74fc278e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166621 Malicious code in syahmuda-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a265b185c97c3a9550653fefb3aafb128f0960e8b921b24a33ec5557586355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162041 Malicious code in nasution-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c0a2ac3f09e7dbed549ab8dbe3629edb5a6f1f435f150a892f49e756517ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152775 Malicious code in arif-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50bde25151888c2283d987b6c00a798a5da072e010b2222ddd97c58c84be3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165279 Malicious code in ruji-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87a0b1c12f13fc48c90a05b8fadfdb5cc94f8c5f8d01d78e741daaa24c014a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162773 Malicious code in nokire-lokcek20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f93bdbea90efc28761fcc2d3ab70d2952b032f48ce5df8b2be3d310168520d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160675 Malicious code in modirai-igno-jihifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff926f5386a4b7b6f016022cc2b6490f1c35253fdf0675934d669d79001b5568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161567 Malicious code in nabuf-otogafian-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b9b0f4089dee87e9e2531d892a06c8f91d4983f70fd75235cf5fc93651dfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156788 Malicious code in iomodra-forufa-jali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a949639f90ea216de49d829d275a4b075c91af6190f8939eb2d5c6c42f094c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170529 Malicious code in verify-ticul-bua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c6ad69c040a0b376fbdbcbfebaed3c824a727f1550c4eb045ba9966ac4b11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170418 Malicious code in verify-ayisali-gans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c26021d7a29aadb481e139baedd02ff1badb0b805f0a0f8a2ab28610a6e63e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150764 Malicious code in @miptaa02/ists (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09993bf57e3e1d118feaaff16d0fb728a2bcb93d85ae5d45e8c32f94ec7eb9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...