MAL-2025-167229 Malicious code in teagood-nakama62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4772cad26423a85b4a26edf51211888d15543575499dca07046292f0944f674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161403 Malicious code in nabuf-otgigaf-daji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99acd0ca7e7e6cb02cb5ea093ff706953bd2b6ab97f7fe5db3c8209bf6ea8bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163844 Malicious code in nudla-ofog-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3607a632ddf54b34ecb68eea529365a6cc715e2c8ad2ce45d6f2314cf1cc0fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162918 Malicious code in nokire-loklok62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747180807fd3d7919ed3e1089e2ebf90625b672f51c3235ed916fd70f8b77890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159080 Malicious code in mahnud-nofiety-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10d1436ff360712c3966004938cf582e3f566dcdd6321942cf502e50d1cd0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159620 Malicious code in manda-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21ff3c876273f7f9d75db3e0746d2dc356b1aa4497112b37b82005bbd841923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163130 Malicious code in nokire-namiresan74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26033363f3f605ac11dab3dac2a690bbebffcec8773604e55b31f5681c6fd8aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154916 Malicious code in fadila-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 142cc8b2f8fcd12cc387bd4fc43c6f71bc3a537226f39f1bbb8504a19a670ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150976 Malicious code in @miptaa02/teh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f228eee434d3449230b0f03e831415ba8e44ca656d2ee8351b09f752525b0839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164771 Malicious code in rinto-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f366a35c79b62007d795df3130f0a7c25b6cbc53608c62ade5d5bad419fef7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156581 Malicious code in intan-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969ca3f143ef8592d330f35cb0f78453a2ac7ff5ea5a04ed2982b22570f898ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152134 Malicious code in akabi-aliga-aihmava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 911645052c24f90335a1d455b673572cb89cb928d019973214ccb8033e0f95fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156330 Malicious code in inagi-vuma-nuaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2346d543f73d19efa6a6a3cc164df710b415049539bacef1439c0ce6f5c6a7ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168436 Malicious code in tealove-nanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd6eb5d8f6e8bf1b3e21913ea2c859841f80536fdc6af6ec62ce5319a718c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157482 Malicious code in kapvino-soi-faoagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f87526c2a1457ce69e7846e7811697ed23712ae6b7825a571c84c068b53dbaac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165906 Malicious code in shilang-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1876100ab7cf7fa2387e98b7b85f3642ee0387ffa6649e4ebb16706082fcef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160027 Malicious code in manurung-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78eb0971837a86711e28abf2ea0c09048a528466c059859a003ed8ecb233b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153725 Malicious code in billa-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cb750211526ef616373b0b84b30bf8de5596243f66ce0d561842b9e2c5ea3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156304 Malicious code in ilop-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43745deaa9d5581484d4af8f84c90afef04492452ec6b172765cdf71fb72f3ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150546 Malicious code in @miptaa02/axdzxody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95dab39df7152e5920e93c6e4035181ea7d4c827964f8a512738e8d0a9537643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...