MAL-2025-161356 Malicious code in nabuf-oguof-dusagomof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0560fa902387ec0abe08dfb200216f80fe27360ee2cd8b0caedac937b87f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162046 Malicious code in naut-tyutu-sdaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04aac7ce3438838f99b75b3e10e7e8c21cac07ef44e891feef32d58a90543a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163095 Malicious code in nokire-namiresan42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542be2eca1f6b481e0cbc76cafcf40a77b5ca16359585f5433e5ad9c464826e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157221 Malicious code in jurss-zas-dsfas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96363fb9056fd328a59dc38a4b35883b1b9252ce9c1f1705c7cfc58b2b87c6df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160726 Malicious code in modirai-imgono-jinamugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a7c8f1a7016a59856c1c28e368dff1838973aaef763c46dd2c89cad8f8cf45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165267 Malicious code in ruji-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f50d6c6bdd2cedfaf7bbfe97c8bf0c7ddff9c3cc1c0f88b8f1c98d9b851bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158324 Malicious code in lookingan-konami61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdecef845b656dce31ad22ca6297f8aa870da86939d5850a375efbdccd205ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154281 Malicious code in demdadf-sadudar-adudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc43d44b5cebdfb785378ca653413883c4a6dbebd44e4163ea92436cc8b2d006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150841 Malicious code in @miptaa02/mita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3465c8ef9cdc52b50ec0a0db23abcff5e4fe4c7bf1c88ff6508f4f0c827a22eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151796 Malicious code in aiboa-miolipe-agatama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dcf3ce2b208435b68cf9f9f5e002e8a58041490873180862646039c987e0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152526 Malicious code in alvira-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4827d57ebb8edcc2c9b9f56f4fca6ed1d304b655e99e9c4bc8134a03a49cd249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162045 Malicious code in naut-tyutu-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eedeecaca47930e6d81eaca14d5483b9a8006c2aa2337b015c853a56c8d5f884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166355 Malicious code in sunden-udik-vajua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4d0bed80c9a638e359229e16248b713d8af15caa8e493c4fd2245bd695d540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164687 Malicious code in rino-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c44302aa36be938828e7fa43a32e9b356d85dac90e952bdd0450c8c20599377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156490 Malicious code in inal-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c5db6e5cb2f730bb7cdfc75615b63cdb8365cc18ef6ba8e4c65f27e231a6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168341 Malicious code in tealove-lady34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cf63b8c7882a671c85783b9ac262e10d13e56e223e480fb32a7da1d876c352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166430 Malicious code in sunderlan-ud-vapalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1f131b1b18f987965c8ad0c3fbbe872018eabdc69ad2855902b4978216e80e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152241 Malicious code in alfiansyah-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5ec0b2d7d9ac16b7dc37119dd35246e841555c03b1a66058dadb0f79fc93d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155969 Malicious code in ican-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695ae76a196241fafaa2d6d240b2ad3c5f07a4341119e1a723642960a06dba9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163806 Malicious code in nudela-ofgaf-gajafohahagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d671aec1e5f8abce1e566f081224ea1c78afa3fbdcd605c8db4666596dc0bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...