MAL-2025-161540 Malicious code in nabuf-otmbian-ifonabogof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56939cfa881e421055e41d897b8c0131c604aa58c25190fdd88bedd7e9a12d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160852 Malicious code in mundya-misptasa-afsda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9d3348634828e9f6b15df58f4685b8b266bd25e0338f7ae58529eadb2c9354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152027 Malicious code in air-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dcb0f3683e0150a9461a4ab3aff5f73426182cef11d0958f1563078997680a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162902 Malicious code in nokire-loklok48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d085d9f2e99ec4cc2b86743092decd804113e029202b4755cf833bc7a752c514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155474 Malicious code in guras-visa-china (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2cc69d4f0910ed7ddd48d8bd98c029dcde9aca5d41aa9fa47e98501597a8e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154426 Malicious code in diago-klop-kalosohabaaibak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55833f689a366c1524f8c4ff52f06c299ed9881d08dd3c426375e387167eb298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162526 Malicious code in nokire-genji38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfc602aadc0b148d57ffccf505f803c37c5fe9f2bc738877b908951a36b1b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154737 Malicious code in dioalgo-kloip-kalobkasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4156159cb55f7cf136e47d389b5fcca8a0edd04105eb2bd5139ebbf0b717892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156263 Malicious code in ilop-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d1da4918d1b3b6c0c3b9d218c40b0c2f2ed08058c146f6629bb0852e5906e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150518 Malicious code in @miptaa02/asauig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844b4f2abfbec7eaae236c81d3d0fb6d99c593b648c895e451dc71f8ad30ff67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169449 Malicious code in uafagarug-mifi-sut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592fc2703a665bad44b0943822ba7a5b527f2739fe4f056f926dd652cf681c6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149986 Malicious code in @mipta1/ds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75dd5894d0b0cc5e7a026d501f8bd28790fc0194e9074bd031746149b11b58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150898 Malicious code in @miptaa02/rassadzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cfaf5e07ffdb00357e8ea72b7409a938c7628fb3d7d773fe6f3b4f5ede61969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155609 Malicious code in hafiz-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed20b0af7eb17320b96c13d403409e3bf8f39d9e2ab3c40f175e115e0c3d5a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153392 Malicious code in avminh-afais-fomaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1f1c547a4c4bb85caa0e487151dec6e295fb9c510ad262f60aee7cfce19cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161629 Malicious code in nabuf-otoin-agfgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934e793ed0e582d7456fc3e2e93cee51f848d31a72dc4896f1dd53915462eca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169043 Malicious code in tehah-nutr-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236ba76e0231370f74e8d19d02ae0954945c767d48af54adbc0c5626be093adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150354 Malicious code in @mipta19/dcde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cec395afecf0f15fafb5f9db72d8edce8ec4d393d642efa4415fe82e15bb3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165912 Malicious code in shilang-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c04863f2673aeb8e44099c64e00b8ef7c800dbb9ba8d1ad2eaae10ffbab422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160633 Malicious code in modirai-igafo-jagaigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817621ce0dc55ce92fe3840371140206865ac5f0d6ccae95683db725b8efc9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...