MAL-2025-161616 Malicious code in nabuf-otoimn-igfogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadaa2f1964a10623c61ecaa82616e303fb01bd8ab601f6d3bd0e93751e0f11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158951 Malicious code in madan-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1696e30580f5d7c08c3dd40bbbc04e284a5c7d0d211a26cef9f0dcb6529fea48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161325 Malicious code in nabuf-ogauof-dofuafosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9163dee36559aed87eddb47b7cfcbaf4186cb4a181dc2559270cfadd5a0979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164060 Malicious code in parwo-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21cc742b65d012d27fe08f6409e1e44dea542902ad2adf9947f58e40094a3af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162644 Malicious code in nokire-kilua53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc4786d7b25cdd4b51e8bec74bacac5faf6b1e0bf712723cc7378d47c799cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152376 Malicious code in alita-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d8cb415430db290e64da4f9adbac0436841ede314f7e208e51b1921fe99330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165384 Malicious code in sabua-muhuyu-tadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30844e2d8b1d817380431fada0c1360c63a3517394c0c6b31347886ae199b91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159233 Malicious code in makan-amoa-iuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac47cae83d7cd2097770953c516e2aca49df923e82c512ab18617e8f001e355e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154651 Malicious code in digo-kamoi-ailasaloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519d32dbdf7c153a8b2fe001ee366672f8ee476ed07fb612a417984fdde04660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168341 Malicious code in tealove-lady34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cf63b8c7882a671c85783b9ac262e10d13e56e223e480fb32a7da1d876c352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-nurazssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0755738e42217653dfb9bfc9587e07c31837775e3f991e176b69f3d9faa70c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftaiky-there-eye (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb3119aac38564f8b3a0326714d46e658bb5c5f45ecc046c3b885a01e3199fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27d810f44f3b8aa916c7accaab625cf10fc89fd5efaa5d16666fb3c9db2cd21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a97fc75184ea0883a91efbd8ee8ae8b5fc98ef41293b1888a08c6d3d5e07e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-court-automobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e8ec273ece14d46829f33af37305d2465eb06ae34f42e400c344cda3a3110e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f84e84c5b37d961e5a207166c02b7a4a8b9756f9db800913e3b75b53e5e60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf16dd72da2f5f664f006e4fb0241a3b8f30dd5fa82256f5b425a4a4f77f44fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153462 Malicious code in avoah-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3055897e973a49e7cc6b5ae665d5a665721cf302fe2fb2bab2d0805a5b880c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150316 Malicious code in @mipta1/yisadasfdfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d597da24ce8cb49d47f98569e79e7dc882e8984aab2440f0c0beb6d5d1a474fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157415 Malicious code in kapafovgfino-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc17b9663cdfd7e01f241e546c72dfadaf9034ce6ef59f6918548ff2a12acbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...