MAL-2025-163772 Malicious code in nudela-gagagaah0afhf-gafsafoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fe091f60b3051fef0a8ea5ca2fd800f48937ac0f895dcefda1242b89225371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160542 Malicious code in miracle-dokloi-ikak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4220fdb619804dc0636929ca9fbf9ad5c8b51c02f78cf3c1d381a34a548f3476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162548 Malicious code in nokire-genji58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e023c639bef42698eab941967a208f5f322cf2cb08a4e49ee8f0343bc03e3b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150096 Malicious code in @mipta1/kfdadds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2b42c08284828a97353d27464928c533b7872565d6a181eba9a7960642a530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151404 Malicious code in abina-amugui-anupcuamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69981cbaefa32a0cccf1e92405b1698721957d10ff7e0595100bbc4e56506eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156268 Malicious code in ilop-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cbef1eedde414c63b210be73593ac0735322e038e452f163787810ea7b4081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165877 Malicious code in shilang-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3121b1030817a9e12920e28a9a40644d0f9174d0e62c5bf58c8dc878240c69d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153930 Malicious code in bufpani-mau-nafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe9e2bd2e1d52cf173d15f9299809f8ed6753a171af4ab75f9d4531c41200f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158988 Malicious code in madan-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a3dbd224eb0096ad81943496f9c2763d76ba2d8148f171cfa9ec0601bc7bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160116 Malicious code in manus-tavml-maosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f86ec269a58f80fa6edc76bde709a71cd5152fde9a7ebe12dbf4120db85115f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166525 Malicious code in syahlan-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff6380cde13a406696fe8594661170192697769ce6129f4d3178265c24984b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163240 Malicious code in nokire-nana82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2e11eb02aac496f2426dcdb466dedf76df3b1e3cd25f699abaa7426d2804b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155778 Malicious code in hariyono-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97bd55330215d36de9fa6ed493008ab5f7ce77fcc30d5557ee77abedd28ee3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169593 Malicious code in uarg-masituhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dbe533206028880efc33fa2ca677761cb44c702a2623dfa5e8cfd8ad4449c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150998 Malicious code in @miptaa02/vefgy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409d6f936c1ea1ca70cc49e1362de3749e33a31a29bda77f62b6704f5bfb5da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164847 Malicious code in rinto-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f87f08135260634e007d7b11db8f9d768428cf288a5fe49faa55bf70fb1acdb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159466 Malicious code in manadsi-sfdia-marafifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74132cfc1fad42a2e366cd6731fd926b0e646826339a153092c346357da6ede3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165207 Malicious code in riyanto-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f201edf6bba7b83563092f22e919ac1979762de2e60d29432753813e7834bbd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167810 Malicious code in teagood-sukuna55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f6c2a99c241c1393044c53d5ff87d7443239acbd3411fa4e2710085514a6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166368 Malicious code in sunden-udik-vaklkanmumba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa534bfed18769d79b44d031faf542f73ad2e35d708b0de0e8078be8d0740c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...