MAL-2025-161400 Malicious code in nabuf-otgigaf-dajaffi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022d89c220aec8f6e35a0a51fa825a91e61eeb5158db284112b6c9e560c469dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150010 Malicious code in @mipta1/ersius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d350cd1c2ee9a681699b10cc081b237f70b2d131f1370281fd586cde108ff557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152741 Malicious code in arif-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d54170cdf9f1027355a315ad3ea84b0ffd66d87a1591503a4145b3ef2374ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155601 Malicious code in hafiz-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8f628f19987938fb8e3eb5f33b2d36a814159027d670494a4ef621547368b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151088 Malicious code in abang-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5760945b5d902fe2397baf5a6a01398a66ae0a2d42c9ef05e5f99f9d3d596ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160935 Malicious code in munir-terd-nasuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b8a40f540a52f0b2817f90f167587e47eb21364dfbcd4a5ba4c6dc51d92621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159921 Malicious code in mansioda-nona-muiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046d9c63fcd190fa35efc9dfa320a3df85ddea07807aa67b40fd7240e289bcd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160776 Malicious code in muda-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756506581f704b03ad3c4c1040e49cd108f02097639eb7173baee683fdb73d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159393 Malicious code in manadsi-scadador-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faea42f951a5a80fb67338b408e29b31d446e6da06da8ccf43d654d536004ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160422 Malicious code in milaoa-duio-nsastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1968ab37cd5bba579758d56cda8a2a10e9ce2b95e61034f9234761b8f417f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155245 Malicious code in fitrok-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02b7b62c95a1491f79e9dc5833d01944a3ec4ad14b86fe97fd3441ec9d35eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154677 Malicious code in dioago-kamo-alauliaah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e7d156500d4e755c3fc0cbe6d0675be1e3aafe43fe5b78a35bdba598160107a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151762 Malicious code in aciyua-idusut-dajr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5856fc2f9617d380ddac2c0e4f7c1b3f8121d8527cd0d332fd56af5afb88a983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155843 Malicious code in iba-otaitu-umita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0cf9ef7f06bc432f83aa52b17e9b48a91938c548587f966ae5dd05249c608fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152934 Malicious code in astia-ala-malikaloafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3688f017ce9ef36c98d68ce3aa4b30b19f272322e91daa4b8d66fe22d39530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157455 Malicious code in kapvino-saf-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b426931f3c2e13b977e6f9c04f187630d4c9290c938ce3e70e822c4f8dbf3c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166139 Malicious code in suharta-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7477c37b10e739a43b8e254e7a4df86f6f94697b57d604406b25de0c317a3fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161565 Malicious code in nabuf-otmbin-nuyasfsgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314953de707ed41a2b452091eb2cdc382f76eea2a873cb61ad2c6791d0af78ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154540 Malicious code in dian-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac8e89414622505922a2334d05271238863fa03283ced6b6dd843fc6cf0db3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154673 Malicious code in dioago-kamo-ala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3371a361974d6baba10d18340abf8a98d2837a7f942f44f9a6d52fee3b0f083f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...