MAL-2025-165286 Malicious code in sabu-nali-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dced42ea24b6b0a7bb31457391656d5722907b015860e4cbcd96642c75d8a06d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154344 Malicious code in diago-kalop-kalosohaaibak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d89577d599fa6ef79d1567c4c588a2866de2246a6d9dd6b559f9b5e839121c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160406 Malicious code in miftaiky-doll-partly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9752d4e909c55aa087b0f6dcf9283c9102d05fbba86ab4ec5dd865e75dd7e29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155982 Malicious code in ican-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72dc7367e8279ce2f8f6150cd6fef82903b98343df9936a52adcd563e46a717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152469 Malicious code in alvira-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd240b3ca9f653f3f8bea59211fddeb5b889b7d326d9af500fe1808d2513ca54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159528 Malicious code in manaf-marzuki-maj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8d8bf32c42e58077d59ec4a9b17c88171ce41fa0fc4e96cbad08a9dd41184f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161798 Malicious code in namae-nadugsua-mios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7a4f85ef9ea5783b5c1670ecddd8b9f552080d3dc6ec9ab9b365b1da24d92d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151907 Malicious code in aiboa-molpie-aromioai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a6b71855e8696cb28429aa9f01e737b191ac6fd8e32b204c688b3b683e6e6fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168074 Malicious code in tealove-aruma2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75563851b0f2924649cd728b838b87623a6fd2855bcf0ab0087b021f16d18e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162683 Malicious code in nokire-kilua89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b39c3ac801ba65c250b6ba5e8609f37c201774a36a694ba84cc74046592a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150030 Malicious code in @mipta1/ggkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16563c40c97ddca78ec6d564557982a83a85b58b7cc1b9cac65a0ee6ff342839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161925 Malicious code in nasrul-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1444da2c86ab62e313e90b9c9515bb76a54ade6bb8b90324cb68f5f0508c3346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160754 Malicious code in muda-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526bc08480e645d761c1d0c9e2098019b12ece3979e89758f59f687fe5e5d545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150251 Malicious code in @mipta1/skiasjas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1be0b94be0457f72cb17f0d8174dbf4646e22eec4e7e4ff168c1120b0a0fa39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161403 Malicious code in nabuf-otgigaf-daji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99acd0ca7e7e6cb02cb5ea093ff706953bd2b6ab97f7fe5db3c8209bf6ea8bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154227 Malicious code in dajouka-trefdua-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c86355f07fcdd9e499f162704cb0b8c33070861753246f0a095a2686d89c411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159223 Malicious code in makan-aiuga-uyafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5cce71e957ada48bae69fbc0ac66cedc622e73c36ea69e4aeae4f3a1dd6867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169522 Malicious code in uaragifa-afati-uruuo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018762b2912e82b0b260f333968eb35e8b0d360712e548beb4ca71400cdf23ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152229 Malicious code in alfiansyah-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68470dd609ab5e7ac6ef163535bd2066889452ad5eb9949a6d6293507030b9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152150 Malicious code in akabia-aliguaafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb14b0b955ed32fd9fca05661b2927fd0a8413fcc41351ca2183447f92789f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...