MAL-2025-161238 Malicious code in nabila-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8580f0176adc7587539afc6121c3ab3eab4ca59b94195f1f83acfe7ecdc8317f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154521 Malicious code in diago-kulpo-lkasmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed25265a90f5c5406492cb3aa14df0197dddf33c46c7bcbd61fecfdf06ffe3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164845 Malicious code in rinto-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6710f55feeeb7c3c865a5dda53c13bc466d650308be39cda03781f4ac9f5546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155792 Malicious code in huda-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4734c7b9ea6c4a8cb56bb2f1b4d2a4da62953ce9c087d9267997e719752b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169058 Malicious code in tehah-nuyadtasfag-amanasatafn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da822f02a1c2659cf408bad60ab5399e4f100c66c342e6e1219d196c9f5ddfbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159896 Malicious code in mansila-toaviala-madoioibsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d58f6f6fc5d610db5923e03b84d47cfd6c0e1cc773eae6ec7c52654e2bc861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166549 Malicious code in syahlan-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7124408079d8d0ae8a311d55a3c41a827c9423ebfefbdfa4f85cfc6e4b53602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167480 Malicious code in teagood-nalikami77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325edaf647f44f7ef4c17ca677da1b9007e9af94596490e8b17c07150adea676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170291 Malicious code in verify-ain-aiusamakli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60aed786bf21245d1b6de1cb96b27d1f284d5e9650ef5d5155345931ffb70fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e121d55322236c9ba1379ac1696ad69e1e17409ff4f2dffb72125fda72f9f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156493 Malicious code in infi-gafob-jagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a9534999b7364fbd9dab4adf0b9981750e54e22da897ab9e7e4ffd4b7dafe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158774 Malicious code in lookingan-namala60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50dcfd072961fd700a04178a117b5a26b2ddb74cbac5fa1330e177c555013274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150689 Malicious code in @miptaa02/gfozsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa184be970060ffb77903c0f1454a0f71f3db08879ad2720b54df62962e623df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165551 Malicious code in sabuodaopa-muyafig-budfaiufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51900312c42e04e8b0a5cdabbb8e9c656e22597c7e763d93b0446badee5aecf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161993 Malicious code in nasrul-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75950ad3b2d188d82e2e67ad33e6403d6efcf7175c8ee87c7559100ef27c321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153124 Malicious code in avminah-fagimas-fafogfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c00d6d84fb795e8a81a82317d8abe69939ee21bcc064687a35a4ff55a3fc36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155114 Malicious code in fitra-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acbd766cd870d0fd3e71a463cbd0e81495849de7cf34d9ac73f6d0f344a506e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155305 Malicious code in gifa-otatu-umia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67af4b750fa579c71ec775eae83ceb0f2b6291683a6634bf7e0e39a2a1ea5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163515 Malicious code in nokire-zabuza27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67ec0243550dc84a8c6e5486c1687f894b506b4ef3109fa7b92f3d97872cbed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154238 Malicious code in dajouka-tsfdaa-t7a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d825781b5f2ea702a3883034cb1c5c37441a5d30af2afdab26205f485f54f463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...