MAL-2025-155660 Malicious code in hafiz-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624a3bb1ad494028c57ec3a75c3f6ae510b13f04af44a2e50f0c664f82fb12f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162780 Malicious code in nokire-lokcek27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c588ddfa3dfb2120daec0188c11ba2c83d26b2f2f0fe31d38a73572f22e9ea59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163805 Malicious code in nudela-ofgaf-gagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb206e957a02ae82f8e043cb27f0d5cddd775dc2f7d26dae891ec0adbd583757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150283 Malicious code in @mipta1/ttaddx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0848f5a6349eb505df8f2ab6edef53b7f8574f2e458fcb061b7ada5e6a5bb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150926 Malicious code in @miptaa02/rusia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0882086a89e1ff6987fc1622a860e0bbfc15eeb0e183bd90fac7a9cd6f3da216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152625 Malicious code in analsia-akifai-asulanini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f17c6622e361b599d6ddd0953acba1f8e7fa57f367eada409ab747957f5f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169309 Malicious code in trevora-hhisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 444d2f9ed7cbb8dc4d7cf96ecfdc25e2b1d785d8db1c736baf2e89af68f48d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163829 Malicious code in nudela-rahfae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038ccf42158ddf7e6ebbc9b05c93b66a83e4a37d6a8b513c6ddaecd280d26a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159311 Malicious code in manadi-scaior-daraeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de57f48d208a811cb0aa79826b3021ec36ad1f6534ac7a24d049306fc777b58b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165507 Malicious code in sabubauali-nanliui-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5290c5da8fb2ad5d6086f71de06e3fa5bb9b31b91c29118480440ffff6303b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157173 Malicious code in jurss-gasasd-9sas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2afdfa52029f09bb6795bba6fd5051c752d00c518eee787260a86fd11f6a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156812 Malicious code in iomodra-fuoa-janu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 688b5c25bd077ed03b09e3600617cb173cd0ac9a8cb09906940dffdbc2f97951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161801 Malicious code in namae-nadugsua-mitosia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b542777fbb97596998d429e2a57d58ce47fe2c18f15186552a234264ae1d8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158979 Malicious code in madan-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2355f6aefc6a26fdc36eec03a9e90e61039eafe37151708adc93252e73fb9110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165849 Malicious code in shilang-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d70d35c6c55c9586d81abd74c40990624f82fbd615cd8243ca31182af46e6d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158955 Malicious code in madan-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af78c42791a13ae87fb2458d271a74dab658088183a1a199722ae7eaea1eee0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169599 Malicious code in uarg-mithai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0684fba52be7f806592deafaa6697b90e992f15f08c20a4c4e08fac7e31fec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164730 Malicious code in rino-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4ad276c5dd4720a6e62afae524993bf8a1bacaeef2106dc605587704ccad4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150800 Malicious code in @miptaa02/kmifsaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954a4ff45eed6c3bafe29ae401cd99fea3063e0edd4224d03bf7cfc4ce36672f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154655 Malicious code in digo-kamoli-aila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63f3ff5980afc5ac76656675045465de4a38e5a73a8f2a62e73901d12bd8cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...