MAL-2025-151039 Malicious code in @miptaa02/xd2rdtj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7f44221e0e466e54041be8ab2437b32ba768095fdbffd20b2eac841e32761e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156346 Malicious code in inagi-vumaf-nagafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795d3057af2228ac9e20ad7f5b50d5eeb58716e75966f13009634b02024bfcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161559 Malicious code in nabuf-otmbin-nuyagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f77a615548ccb0ae5d18e878edb654436182edeff8a19db3d95c4f2a35810ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161746 Malicious code in namada-kasito-nuatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f0742a9e483fc236d2eebb3ac7d38fb8e4b05d1a34f17976fb9b917128f7d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165096 Malicious code in riyanto-112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4205e4e25255c7f07eaa35fb6536af3382a2b396d7cf0cba2b0c66de2e881bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157126 Malicious code in juris-zs-dgrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6dbd21607e25b7440f36f7b5e32f51541689b0061916ca592c340cc69d8031a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157263 Malicious code in kamasada-natai-yolaraaddi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f63e70d5bc3dacbda4589b6ad65e903cf67ad2dffce99d5e68e23c7bee0a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152351 Malicious code in alita-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9143285dad0161cccabc7b8713db4257b5cfbcb67b71c429140000c480eedf18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160988 Malicious code in murai-burt-sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b0aaabfa75a2e7f68ba5e04d1484a7f7c6dee0a95563ebd64162a386fedd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161423 Malicious code in nabuf-otginaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73132b3844e2f34159f77b9127bb63c395e83590d3328bc2a972a04a3f621fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167008 Malicious code in teagood-lokina43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9311a29aabda4d2df1814cb76942d48a14eb4c51d91941f1768bebb182ae7e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164028 Malicious code in parwo-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e915035fc1673f117f87feaea9be8e042548cedb1d0225d7c2a9aa9bb83a38cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155819 Malicious code in huda-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1695c8ad4ee63c2a40946a29a86470e794e69ec4f3521a3457f1e21774ae29d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164537 Malicious code in prayoga-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62511b0d48a26de2fe6de5cbf541d8607c04e63b3aa7afabb41e02b2d98e21a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159267 Malicious code in makani-aiavamoba-ufiyvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2a0c93c706174d317fea23aedd27e68b08d07194ad54782b10c36fb9c8f46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164299 Malicious code in pitra-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70642fb94c2d751c372e12f5b055135170ce017bf72cc3554829b73a69abe3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159871 Malicious code in mansila-toafgvila-madasazhkofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5b9361bd2b69dc41485d0ccb281a42dc6646246a5c7ff3046e95340ad6d311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166496 Malicious code in syahlan-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa80ef6a40614976da4b50bfaabb7dec548dc9988823f578ba446dbd6288db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150202 Malicious code in @mipta1/safda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3435bcf4ed78c69e05f062c1c4028cdce5706d6808d8e90d244b78f0ef0b5c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160779 Malicious code in muda-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4f999c2b7d950623701bb5460d7e9252f0b1237cfda96a6f008e654ce24ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...