MAL-2025-151404 Malicious code in abina-amugui-anupcuamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69981cbaefa32a0cccf1e92405b1698721957d10ff7e0595100bbc4e56506eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160334 Malicious code in messi-sdfd-tytsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ac9c28c14b4cb00548ff877a5db6413ac5135a6372acc540c76381b957d2fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162767 Malicious code in nokire-lokcek15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf4cb4d12a32b466507bf6e3cf3331b55f73a521d0bc89648e4428e78f5e23e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157625 Malicious code in keyla-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a891a6e90b7ff8443a72ad9279275c1158804594ae0add8f0115b88d28459fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154043 Malicious code in cinta-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e654e02764d1c5b3cd0484135659ac680b30198fdba216deae2436b86c2d5c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169293 Malicious code in trevora-cir93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da579609b4128f8a5ee64e657db5ca632d9cef02c0150ac17ae7326b248b93d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159178 Malicious code in makan-aiga-fiufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490f8c3a2e7ab2e7c08d73b264d1ba093d0d8ea08aec97119578012192926f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167758 Malicious code in teagood-namakai98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f87e004eaa2a02c39eca5cb2272ccea1b9a0b93f33c6dcf127667e9209939ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164934 Malicious code in rita-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3945657e89ca95c120ba8e920451e88b23eea7e64a203d73c26a1e2fac9e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156942 Malicious code in ita-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceed00085c980ba8e71a7bb914ee847987d43e20d95bbc76eb0c7feaa4a7f823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162850 Malicious code in nokire-lokcek91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0f1822c7f1e759574bfdad4613bc7733fd9bc47785eb50e4fa5a7bda7b1c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162955 Malicious code in nokire-loklok96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5c0ef7f12c801ea9f0291aacbd6cdf1653184035d41376f32415b3a455f65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166677 Malicious code in tadashi-tssu-ren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9597e5549857f09c0f7daf84d16c2b6683f293903a97f78ef1aede9341f0df10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156760 Malicious code in iomda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfdb8e55b59b50e0319418dfeb3947ed325d340ca70d774f3a2cf8729215bbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155790 Malicious code in huda-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b888cc698f25e7940fd6976df12029e14cfd02331dc642a9e72ed90b78794908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170206 Malicious code in uyau-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff39d24296193e3b13f30111d056812c64435b5baaa5ab876b91e9026f5b3a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160974 Malicious code in muny-nutsdr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317859b496a3f5e06081d2bd444c6e85ad95dda35493c7533201d68b2bf8b210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150821 Malicious code in @miptaa02/mbape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1195723813c4fd9cb29b972f2d59169cd5543f520cf2a24e2aaad025bd63b239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163772 Malicious code in nudela-gagagaah0afhf-gafsafoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fe091f60b3051fef0a8ea5ca2fd800f48937ac0f895dcefda1242b89225371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165207 Malicious code in riyanto-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f201edf6bba7b83563092f22e919ac1979762de2e60d29432753813e7834bbd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...