MAL-2025-160422 Malicious code in milaoa-duio-nsastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1968ab37cd5bba579758d56cda8a2a10e9ce2b95e61034f9234761b8f417f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161678 Malicious code in nabuf-otomabin-nuoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5388050579ed69eb8a3bf8b98cb80ef139d9f28c09a620a8ce975349b2cfa53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166376 Malicious code in sunden-udik-vamusjua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d30c1f335eca4d7f0eb4b5d4976255995180b0ae2211aae16684089a26364a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150404 Malicious code in @mipta19/pmpr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0232815503b862ca15899491484e37a00f9a40e7552f56abbd042de7c3b50d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166317 Malicious code in sunden-dibuk-in1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2315ae90801b05acabd0814374bd780e37e91220f85834327e2da39ea0044867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160897 Malicious code in munir-n-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e3ab4d7b2a9cb8f5025fbc79e1c9d2658f22610b39e5397652d372ea7ddbd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158251 Malicious code in lintang-tea87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da79801b5e2c0522b67647b4d785434930aec8ae0cd3453818ec93f2ad0de11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155607 Malicious code in hafiz-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ae82fa408dabd9de6f26981c3ffb7b4f385a06592aea3feb15836f291cac87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160231 Malicious code in mattu-miop-nuaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7047d6cfa570f106c3f21df7299a58288a4e4c32362eee8d4dbc40cf8ea36bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157763 Malicious code in kuinsu-luki-nasunnabaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf1c6bb742ca0295428f98c54076f64d4d45ef45472257ae701dc8babcf2155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159595 Malicious code in mand-nom-mutunau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e58ebc8b870857e3d0dfde17c1e65aa19c3ccb717004d9a70dc7a2af7764af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168477 Malicious code in tealove-nanami47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d57d0081a22d3ed968be5a787f4f1ec2ee8cb971655d3110e452c4d4dd58c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162203 Malicious code in nokire-abimanyu85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 411fa0aab6f595b3a90f297b723a4903bfa8adacf9100ae99fc8365206cfcfb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162527 Malicious code in nokire-genji39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f300f4f88d7593c78c859545b6e56436ba1473768bcd5d3d7cef1951bbf6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161473 Malicious code in nabuf-otimn-gaoposig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a99c84dad2844f462fa20e3e6a89fba4a9be53f693deb93dfb2e81a025d7c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151998 Malicious code in air-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf816f69d56956ae91216cced8d4e04c876c6e1eb0e17dbd136109630fc8a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165208 Malicious code in riyanto-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bafb4ee2a48d34c28af3bb4cffbd83a3b40bf75cae28fc29c78fa2b0f1aaf9fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166202 Malicious code in suharta-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b38d049a8edabbd0e9176ea0e24c6915b971b84de76fd22cdc3e58d3dc857c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166530 Malicious code in syahlan-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5cfeed41d84e67a4496d87d5fa86826aaf133b81328adc6cff6d901b763a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166592 Malicious code in syahlan-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62cb0ff5e94390418faf7ae4825e62f6c93a4000d25e9343d08b43aa883b141d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...