MAL-2025-165278 Malicious code in ruji-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55fbcee6886c357ed9345d861434babe69ec1b5d23a4456d4e1c1e194bb73df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161655 Malicious code in nabuf-otomabin-nojaugsggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad7a256de090db25e6b081d3cd8a573a5102751c825ce0e5cf6dfe56cc1709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165360 Malicious code in sabua-muhayu-tadugfagmafaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c11336a31bd0ac38274930f25f1a7eba0f043b1ce0b14374dd8fba522ce9d58b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159258 Malicious code in makani-aiavamoba-iaiufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f39d99f8118f2ae5a4f354060712e16e59574c48d54b957d88a89bd4a32e4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165895 Malicious code in shilang-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397d52ee35ff748e3ba0a2f99213ab7f3cd102320c6fa7f6e1f7812f26399948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151094 Malicious code in abang-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa0c80501666e125c849fa701515b70a48537c731e3939c5b3cb777e5726cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164055 Malicious code in parwo-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb8dd1d214948ab67d8c84bbc8b25083de5ffa0468e4422402ac0181bcac9f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154119 Malicious code in cinta-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9276cacfc714e93f443945a7a137722671d71c26b6e26cf7ea040686638f86ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162702 Malicious code in nokire-kore16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d5f46288e69115adf8ae49428f4a502835aa6ec8ddf7579dd9a3a7f83596e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166268 Malicious code in sunden-diak-nulamakuiabin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c23dc86c0b07f52554812e151279d507afeada1ea188b4d1c03040eb14bb65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165774 Malicious code in sau-naki-iyuup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ca3d493f461520e274e6c284fc7fd325bc90d31cd5669ce6d489bcd8e890fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162389 Malicious code in nokire-arhani73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5b29e0335870cbcb3c80ddaeab015e4ce013fc1c1f42a3926edeb479839516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159571 Malicious code in manapf-manuta-mantaap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf5997e21542bf349796f5ae2217210a3c9f7797de96cf8c4e1accba37b1f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150705 Malicious code in @miptaa02/gzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b67545ce67a79c8c6155432eb2bba485622ac33c4ef76c667d8fd0b1abbc822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170575 Malicious code in wulan-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0df05fa5e11190477b33eb6ed24426437898ba498bbdeeeffd8d7ce17500f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170156 Malicious code in upilka-luzmu-kijnuhigihjani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c16a1116ae92bb7b71cbf1a97f8904d1010ba82c3ef9beddf06fcd86b877329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170183 Malicious code in uyafru-tuitat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0648ed55a78ac84dd823d7788b232abdb7d86902d9635fa58c33cc0efdc2fbfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155319 Malicious code in gifa-otau-uasuagsffdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ba6810291b4e877ff7540e60b1e5bf346fabc7a41c4b956395e8d67096f1a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165918 Malicious code in shilang-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8b8463d1e62de5b5aa515ad42550397b74b15d8843509d93174aff9b132141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160863 Malicious code in munidr-nerf-nasuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1121d09d23f5cd586f7c6da4ee6efe24e77c4ad564803031af57c279e86cbd23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...