MAL-2025-159505 Malicious code in manaf-asi-manus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7082c4992170ad464e148c6c23338bf096d4735eb4b975c35fb99b8a73d4487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157873 Malicious code in kupai-lukoniuta-igavugukafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b165c921c3aaab58a1ee49eaa0b2fe67b3055389923c13e3c54814a429efa707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169032 Malicious code in tehah-nutafday-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de503c77d210f606358d8366864e10a8c62fa824bfa58ade0d41da7320873af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169517 Malicious code in uaragifa-afati-urufuaayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff2fd0cc2bf1f2ba05593f94e5022020d522a7067ba724f65cb1f702d738a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160182 Malicious code in masauan-ofa-batovuila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5fbc712c4eea7e4f5c1782babc963680361e250beda10ad81bf048298c92b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154130 Malicious code in cinta-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed9887c053f66b78bad2840e19ad96830f02402a1a47f81d026b1ffc61fef03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162619 Malicious code in nokire-kilua31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5491dd41d043ab69574eb2d7e999c1080e86366c66565dc04c86b2b03ca73378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160886 Malicious code in munir-butya-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7130879b556a9d19d3873891b035441aab483ce4c8151ca764ba1428fc5734e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152398 Malicious code in alita-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c9519e0bb5761f668cff73dd36e1360e4d7ec9c90f9fe7f8e173bfcd1c86b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165010 Malicious code in rival-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1e4cfd0174d5252cf79fec5061077b2d20c7a117cde59de86de734a86238a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159091 Malicious code in mahnud-nofty-gogia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612750d8b8823d863890e2ac32efeaa57c32c540ba24484e0cb5762e12a75514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161070 Malicious code in musta-batada-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb80c61e2b8db360fb0cdcc18e35f12290e3868410c18b307b01abfc5a2b8044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170157 Malicious code in upilka-luzmu-kijnuhigijani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab7eb8bfab350ae000c3626543825a39e45a1efd94a55f5f1a5b030229bf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150607 Malicious code in @miptaa02/fagsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189ad4dc09e5077e693f2318f492ecf71a75d19889c1445665ed5d4a2f26ac1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155699 Malicious code in hariyono-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea741a20b56ae569b779b2acf0073785ffcb1e9a706ca660edec45b0031bd6fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154313 Malicious code in dia-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff1123100fa9c082f85bb48c95034eae67ab9c27c43f4cc1ca2b4f3abcb0525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160215 Malicious code in matane-c-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8bf6de177689550dfd963fcbb0baedc3dfab17caf0fc1314dac22913505f947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161013 Malicious code in musasiak-naik-fatcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 513b0d114c2c4e186a9ead89178dd02e269abeeac415debf9f366b145cc2176a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160211 Malicious code in masioluan-ofamaini-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a648ab236d688fec627a39ddd6418c9bb1e4bab975bc558c5466d80f460524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157951 Malicious code in lala-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bbafd6cd43ba2fd480a1c2172a79c3154e689c5cfc97c6f368db9d1ca7d114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...