MAL-2025-156750 Malicious code in inufi-gobali-jagruan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5290539e052ab44b7de4f39ee63f3167eb7eaff338d77e20420a7c699e1f08cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153926 Malicious code in bufani-muyu-faug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfadce912652be3731b6ea08eaabadaf5517c4175893d9aa947564127f929d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158790 Malicious code in lookingan-namala75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e04ab38e2df3a0012774e8d73671af7f484d750005413c4e95614fe3cbf01c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150713 Malicious code in @miptaa02/iadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ddbcedcdabe331ff3f8d71a054722689d8a23f6ba7410f3a4c8d5399f675f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149968 Malicious code in @mipta1/ayah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c7e62dcf453f853282bee3719cfbacff986a1110af5e03a80244cb1350a44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160619 Malicious code in modirai-fuhopia-jasfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0e00a9fa5188c351045c12f9269f5c468c8c8063bccebfec32853a199793b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152562 Malicious code in alvito-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe79ca8f30b17b7954bd1244b97d5c0ebf8018ef56c8799d33ca5557e5aee35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164442 Malicious code in polymedr-minus-buipenajaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90bcb7ed0652c9f5fc3efd537aebdafad23eed9cb82c87770ab7a53c77de214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157224 Malicious code in jurss-zas-dudfrss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c19501b48ece455c8af62fd666330ac0ec0766a67b34ac8e4edb7e3e3d133a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154286 Malicious code in demdadf-sadudar-muiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41695edf2525dcba72bdc9ceb4848a675f4ece98c1d862d0d174287030a860cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165181 Malicious code in riyanto-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bb35e04718541b0b53ae83cff506371c8f8f147666740967b6b1f3166715e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156835 Malicious code in iqbal-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc635cb08a5075d60db428d10d515fcc4f921d094635a833884e0d1719c354b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168293 Malicious code in tealove-darknest36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd5199e48cc6edad6b04e699e386731e5c1bbe65a5b646b25b1859f5040f8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157766 Malicious code in kuinsu-luki-nsubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1c56d0e4370ed478122aacf5a80e73fa15f4bc8da8c9b055e677ee203b59fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153548 Malicious code in avomainah-frasu-ofu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771bdc11e20aa5d5f9dd5c16a16962cf834abb3323a41bb2042f521e3c7460b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164099 Malicious code in pilau-akaviu-kionaliba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8564840af652b088fb819005e8bf90db3ed354d6cf48841626e91613f5cc63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156731 Malicious code in inufi-gfobai-jimafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2dbdc1c1ac69d675ec9252dcb65b8b211b8427ba5d33d5a74b44c223550ce36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169335 Malicious code in trevora-pisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b32a80dd3859367bc4874c07b1f081de4cb2c173ba9817f2db97626016815bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166204 Malicious code in suharta-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95425fa8fa87c3acfbdc41744f260cb2c926fe47e4d820d8eb8dd4aa0c3a5dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150282 Malicious code in @mipta1/tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a172f9f51bfe5cc90dfb56ccf221f5f51f1637c30ed6d383fcfaa31d1696135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...