MAL-2025-163704 Malicious code in nudela-aaff-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4c21359c697e9de89b31e97aae845dc664afab3bbb27e21360c938a75986051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169845 Malicious code in uinsu-list-patulimbaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 467c36520fbe74e8d3809209bdf75d62bb23ac89ee1d221bfe0ada770e09d2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160740 Malicious code in monadi-nads-kacang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587d2ef4c21bac7e65155a0fe99f04af8fcb380416f80192dd289917c719a91a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156172 Malicious code in ilal-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dcd32ccf756c9ed5551e96f593500bd27e42a4c0fb4eae39c384d3975a58828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152005 Malicious code in air-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d237ce07c7dd7033280fc5f70d28566c944f095575f4cfc11339d225d19696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170148 Malicious code in upilka-luzimub-ilnoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5701088c0f2b8d0042c8a514cf6c690848d69635237291be617604412aec27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162220 Malicious code in nokire-akaza10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38ed42aaa64567f3ebf4782c3cd1525d803cef2db1f1b50f5eaa3010b41b40b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155339 Malicious code in goodmanmax9250-leader-circus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d474d3e2631ac710c373dddd243be7a5fc1d730dbe455607acf0f8618fabca4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168256 Malicious code in tealove-dana48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1880636c0c081cd23343f4e5233bab4f2b8af2c149fb221b1a9e456e43835f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165050 Malicious code in rival-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b4d4961c26f300759906350a219b78e27e900ca14a75077e2c834a70b019b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157101 Malicious code in jimmy-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc7f44a0cc31519f3806af1a407ebfaa0f106f5d5fc596d629ad92b559bc7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151305 Malicious code in abibua-mobn-atauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef3abac34e8de0df268314c03e3c1ab473a62daba40ce718fe2d982d87f73e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161511 Malicious code in nabuf-otin-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56583a36eac2459b72c9f43b0eefa2bafa495c664e7d7ad6a211c899ae9b1583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166514 Malicious code in syahlan-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be7050334183963b0366511bfa59a0ca33adb42292509de7b6496ed3b04aee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159342 Malicious code in manadi-scior-nasuiofp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ad90a24dbf8397d37b8957eab806be56cea9ecf4a2643e1aa3b733fe0ab61d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159836 Malicious code in mansila-tiala-mhlni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7de7946f174e48d53580a5ddb015fc038cc4bd8866ceaf6039ed6f87ef8f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158011 Malicious code in layla-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d516434544eebe424b3aa2b2a16c04ac6cede44c80dba53efb33a8cc0bccbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169611 Malicious code in uarg-mtuhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3187a482936e79a3bfaa696d9bb5b09158d02fc9020ac1dc7f0f1d786d2717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150735 Malicious code in @miptaa02/ikadashi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e0f88acd4b300d8859486b515a28937bc377ddf627c5d3abc912fffdb62a1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162592 Malicious code in nokire-genji98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13e2e0fad08a2b50971960e8c5c23ba5d472dae6880dfeaa791331a65b10e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...