MAL-2025-156704 Malicious code in inufgi-gotumafa-anfoaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7388aca7a3d775a4e7974463823ba12999f591dee857b5899619d03377aedc5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153636 Malicious code in azhar-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a2d1bb9f0431e73f15fd359809e143ba2d473312d3ae53d0cc435e92bfca74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156488 Malicious code in inal-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f0f5f6cd5aed2b61efd9ed00b62e010215fca50df35eb300826e8f2ede51f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170581 Malicious code in yuda-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f29e1d1514ef9c87abf20b76b634abc2f49607bac1e554bb06e30753d00a3b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150056 Malicious code in @mipta1/ikusho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b65bc35be347c59e24a9508c70a17deda32ebd2b9b560a0669fce0ebb435a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153858 Malicious code in bitha-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b32466ed8d1f464e0815f193359e8a58df5a76e7f67ddb2c23dfc958900ffe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157873 Malicious code in kupai-lukoniuta-igavugukafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b165c921c3aaab58a1ee49eaa0b2fe67b3055389923c13e3c54814a429efa707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170311 Malicious code in verify-ain-ukasiamun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57254a196b752e0346a9a7c461156641289aed3989d4166fddb5e58b9679af7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168113 Malicious code in tealove-aruma9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da210d90efa282fe8160756200afd1912cd237e0a7fb0f045501ed5303605f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164026 Malicious code in parwo-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0540e757d5963819aea61ba94b46f8eb9a54cfa37482be79e9a3f4c53a7a7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155780 Malicious code in hariyono-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a56b0c372a56a1da4fffea05abb8e087c34dc8a274382fa09c8e171a83248da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162074 Malicious code in nitaus-r2ff-dseff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faae13436883f310509584486ed71c61e21b6042d49f9907c9f252d6dac60197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151932 Malicious code in aibopna-mobile-araamiafaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4dd0f9a2e619b56035896b64f09406e7a84a8c4a59523802f740f5101007a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155701 Malicious code in hariyono-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be68d408a361613411455fa92bea3fa908314162ccd52a1a24183f1e13e1a0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161103 Malicious code in mutaus-mansis-saintrasse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0209d4be26ceffd1af95e05bddd2f061893c51c4b0206b50d9db31718737d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169517 Malicious code in uaragifa-afati-urufuaayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff2fd0cc2bf1f2ba05593f94e5022020d522a7067ba724f65cb1f702d738a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161326 Malicious code in nabuf-ogauof-dofuafsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9fa072ba67025f9cb445db67f058fc811ae3f096c573881f77ad19108a37c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155123 Malicious code in fitra-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d6895f1e826bb9bbbc4043b2c83786c2be92b105f996a7988fbba3d6b625fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150553 Malicious code in @miptaa02/bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437e4049a7a387c1744ccf8a920fa0182d62caa8896a0b266deb69a034fd0fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166228 Malicious code in suharta-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dabf70a1c4c80a397bb902293546cc17cb3063791909c3d3fcfeaa29040d5233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...