MAL-2025-162999 Malicious code in nokire-nakala46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbe6b62a76a0b8b6485ca30a8354e764bdd6563f8f0e7aa4a22682b509f0d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154685 Malicious code in dioago-kamoi-alaliahnoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e898e0d612db94edae2202500ae082e8b870a316c3d59d9711b41e152441f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152637 Malicious code in analusia-akifalui-asulaniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dedfc6e558852166ebfaff1f148ae226b58f0fcea99fe5d22fa6a541dcfa2707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163061 Malicious code in nokire-namiresan11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a160842026bf01ee11d36662ecce79c2a4972a0a1e6f5bf1e0e3fcf3e4377375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154323 Malicious code in dia-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21d45ea747947cef40b5ef0515d23e7592d6a8c4031f343a00256f03e490b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160681 Malicious code in modirai-igno-jimg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a727ea716c6db03d2302ae2bce40fab835b2a24ac80e1a099ce6bfdf58612453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169244 Malicious code in trevora-cir49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ad68d7f5d8f1149eff30933893ad747e588d12034f4dd99dd8cb25fb9e27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165590 Malicious code in saku-ai-upuasoanio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31794e611169a91339df02a4a30040782774064d1ab90588e66e076b03031cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159437 Malicious code in manadsi-sfadia-maraida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516bdb5d4330cc38d8670f74bc3c9f8101c092207ca75d897a5a517e7b66f49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156039 Malicious code in icha-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832f3db1baf0881008378253723d32b7eaeb1611acba1c11577e458f614e08c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165001 Malicious code in rival-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ebb3138f762727c329d7a3706710df989518355008f80f3c8038432bfd12d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163146 Malicious code in nokire-namiresan89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73c2ce85d9ce9f0aa807bdaba4c71e03e1fa9fcc61a5abd0cec68de4251fbfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150910 Malicious code in @miptaa02/relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403dc22d786c497c651e2f6316f0bab2aedce156a3fc1b4b6c66bfbdd34bd04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166404 Malicious code in sunderlan-ud-vaimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ea509e61fd8481f69bff8732fb37db5d957cf4c38b43be615cadb3e421bcc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162715 Malicious code in nokire-kore28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fe4e4f9afaae5a17e837c33670806b65fcaa5fa521873b41c6bcd3323cc525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170475 Malicious code in verify-taic-alusakilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3883388262c42d0675f2402103d6960cb19e9c36c7603df8eea33f6fd8daa51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150226 Malicious code in @mipta1/sdfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d0692b2f2a2b309add2be60b1bb475327fe792e5ddaeecb0155af2643a7250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/scseh-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5fe4529b958763dfa618e1250e6c65ea053c25555882e67c812f1b5c14d969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4229845ed27d18cdb273f4952462663cceeae86ce93393c7170d5a00435141d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-miss-br (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a09a93611d5e4e6ef96574356f2e84196488c2f846540f7932a60655201e81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...