MAL-2025-156091 Malicious code in ifargfai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f646d1cb951bceb6b661956526982538e9540ecd2df401e449584841a4c4f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155507 Malicious code in gurs-gram-tonot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce51c9794f8c65dba75010a4bc90e070c8d925186ddeef67b4aefdf03acdfbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152180 Malicious code in akanabi-aibia-ubau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f34328f810f3110d3f97a073bc0db3f75e856e9378a09d45d4073d6b4925c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165859 Malicious code in shilang-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5645ec49365109fb8271715518cb173a6b5b225902f719da5a035478662ffc51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169417 Malicious code in tusya-fsd-frsdeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 953e652e356eb427c251a547165fc633f760d151a8733ee2d90c37a7bd15fef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166206 Malicious code in suharta-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de047d962b5696e26bb066868c9fe8b0577849ff88efa3bffb72fc6f90d51afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152713 Malicious code in angin-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674b68aa832686c0581b80cb23c8419f14025a93902302eda3e23a6712e5619f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160462 Malicious code in mira-dibok-inumluiuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68cb819cf4bb8117ec6887fe563741d1fc29b9503f6e8910a7d012ee7fab1a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167493 Malicious code in teagood-nalikami89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d450082fe716820e3ad1fd6eb29c71e6cc1da0d154b2ec0be40164ca005729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169319 Malicious code in trevora-kkiissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70fe100c784d6f24b9b51cd3051d689b0ac4b611e36706959d25179fad28828a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150477 Malicious code in @miptaa02/adahfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874e315be2cb8bb04dcb743e2890cc3c8a10df79795ab5a1e2907dc8afaea4af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159544 Malicious code in manaf-natui-nuatsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452a30c3a656dd75609104b328cc3629182e8281c4e8a7463e53d7ff7f376311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164955 Malicious code in rita-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec678701eb69cbffaa908965828783380cfeca935d3381ee3dfb0982771f5ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155880 Malicious code in ican-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503ac9d7076f3c1bae9b59f429951c27dc62e3c8da72875f3c4175b03f5a49f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166409 Malicious code in sunderlan-ud-vaknain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c5e712624bdde4c5088d577829840c9b4f4090b48763720caf91f72502ba328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153771 Malicious code in bintang-tea23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929887ecc7156f4bfaf176884d643ff50a9dab3b55ac0213383faf9e533b175a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166331 Malicious code in sunden-dibuok-inuiuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890fbd0da72aa4ad88f5b89eb27d1793bfdd59dce295b1047719bbc1387bffe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152348 Malicious code in alita-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bad65d546a495d5d1f9f455c39c3a61e60c67c69ec438398f7a68dfd1f633d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167181 Malicious code in teagood-nakama18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee0243d094c2a1acbe61e67dee6d0d467bb4c639cd7994b287241fd70c433c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166418 Malicious code in sunderlan-ud-vaminanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce04ee35871fca7e3afb4f3b7808b5e9aecffe844efc3530cb427ea63634f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...