MAL-2025-161233 Malicious code in nabila-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7510dfb20ef8c07856bf2375c08cb499eb09347eefc5b78db3d4649de8263a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163803 Malicious code in nudela-ofgaf-gafohagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100226555d0b4a91de69298c3fff2af9c9bfcf2851c9e26918435378d67156e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163372 Malicious code in nokire-rara80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483d3b7ee0dfd967b3238b6a4faa4d5e94838718b86e2707ef4b4994fdb74b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160309 Malicious code in messi-djhhoyi-fssae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a721694127e3a360f13dd96bced35bf2e7614b40590f4608cfc257b9a6f962c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152116 Malicious code in aji-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c801f863a23d4436ed5f0736cefd4faf352d88c911f8802c714637be9ed94c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170150 Malicious code in upilka-luzimub-iluanoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24daf3af81308bfd58c399af0faeae21684f0946c2d853241b735e2ec91f161c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163051 Malicious code in nokire-nakala93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5197827a4f629f1e152883e7f7128c903cc7614851a3612db4b5eda3611aa549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157089 Malicious code in jimmy-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece1ed5e65e63f04e7c3e06652c2d4b9a27dc73ecd3bb80c934bb11a256e0410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160791 Malicious code in muda-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0c02b3d00cddde0ef057810e13c8cf88fbae28ef0c47d6a4d38d6ff6fb4d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165056 Malicious code in rival-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf4d6afd10ba83c6d12da53c392749f43720b7fe157de74df7ec22ce8b472b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150851 Malicious code in @miptaa02/msda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd91cb98351519a06778ae6cfb651dcffe6d96c82cdda0bb4619ca0b14ba3102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161241 Malicious code in nabila-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0469ecf0472465f2c8789b10dd1b9b5d00a0165ad425596dcfc2453b76eef8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159816 Malicious code in mansila-tiafala-magolani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d330d6b60956b37e03326ce3dccaf3d0053a7a473c9e2073863643357af5b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciydua-idusust-daru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05f7fc93e46140ac77c1ce9e76a5739000de902f07cdaf10bdbc55aef5a72dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgvila-madasazhkofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5b9361bd2b69dc41485d0ccb281a42dc6646246a5c7ff3046e95340ad6d311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040546e3b26ec6ea61f173ddaa2a2ff235c4ef4732f4032e7d362745e48fe6fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gsasasd-10as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b49225d154d6b433ad1d0b78cc0cc591812621efd8a97aadb22473d1851740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7315fc4aa4196f58802e309c532800df298038b143b6142653b07d89d059a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makaiman-ania-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fed25ea223ff5f4d1f05c64fbf1167172073cdaf3755e6d377b197dc872f66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbian-nuytad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028fd8087bd5cb53d0565a295f8b8103ce95290bd40477f9400dd768de5f689b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...