MAL-2025-161249 Malicious code in nabila-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5482a3d238e44a1d08041999adca7a8045b25f565c5aa8dae2b31e211f324d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152072 Malicious code in aji-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6bdaa32117a881444d56afd2c543380d0a7f925415fe696228cf944daee068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163385 Malicious code in nokire-rara91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d023b12a5cb9e7aa188dfaa31b93841850b20140d1c14aaa4a472bdf45ff78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167376 Malicious code in teagood-nalikami104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e871b4334f30b1c7e290e048c71e1b7dbb66d660e3e61cc784249486ac013c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163106 Malicious code in nokire-namiresan52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedb1c9f8a41fccb2da02a03700703034783721bd589021dd73070ac932396fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161612 Malicious code in nabuf-otoimn-igamofgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096b5f18d7eaae003f1f42056f6edcf99ff9d25e698c57c47536c343f3495758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153837 Malicious code in bitha-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b252dbe7708942f292119e7a561381f0b32a6127968c59e94efef820adeeee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165313 Malicious code in sabua-muhadafusfufi-nya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b22ab3edf3a182da062dc54fb53b0873be2819d1502e1ad08384fb57007db6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158428 Malicious code in lookingan-nalako20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f9227df2137f6177b8a5df6411194f7c7b3d6a627354a9425930a57f90c14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162632 Malicious code in nokire-kilua43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd578e869793d1a44fb5dd0dccaeb056277b30e485a151e24a33317bf5ae9c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154787 Malicious code in ewa-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c323eae606b48409c123a6d6f1136cd5a9de55474fb7aa8ab0c953ecbfb3f967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159541 Malicious code in manaf-matfddu-masan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38229d5ba6eb0941c4a6e4d8ea42e1a325643f86719c7459dca584d7bc8443ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156588 Malicious code in intan-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391815ce122232fa9b451f7bd8dce168a324f19e7f76d8aadcf01671e945a7e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161106 Malicious code in mutaus-mansis-saintsse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2171ee97362401fa51c9b3cf43724b362eb596b586a210f3da561a6e10d1598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162375 Malicious code in nokire-arhani60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2e49f2c6f1af26a773b86926d1afc569e5c23c9501683dd2dbc453e4c8b23e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166414 Malicious code in sunderlan-ud-vakumanki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf003d1a2d472f9e2bb3a80a1f3b83367816d43decf7196541b37c31e8709bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166421 Malicious code in sunderlan-ud-vamnnin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18457a71018f043a25e5fe232f428b21489b9d590cbe9c6eca88839ead6e1977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150417 Malicious code in @mipta19/rykdie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce783c17d272e0f3d578e49323b11f679f5ed48c164281c68b1beff96b481e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163388 Malicious code in nokire-rara94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d245b4c88eba581ad5ed46500b0d79c1c6befd0df1b7f3c4a20402c6c316f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150421 Malicious code in @mipta19/rykie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a2d800150c4051c800c5d11c9418e354d733abbd56261f5c6cf147a53d5f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...