MAL-2025-155331 Malicious code in goodmanmax9250-cowboy-noted (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f5aa0b9be9537a57954471914a8e744123b1e04b50d130963cd68f1a487b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160679 Malicious code in modirai-igno-jimagifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b13431147c63bcb63ff630968a5f8801813573d856efa4ca8323703b28193c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153073 Malicious code in avminah-fagiaas-fimokafiganguogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edee5d2b1d56a43c084713c630bf39673822c7d76ad0dd44cb3bacd24c67e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170382 Malicious code in verify-ayic-iamsasiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b849cd0c568262da5f7065fd0d467a0279b9f999b59ffdf99967160d680a16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158525 Malicious code in lookingan-namakiki17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69cf3473a3c2fea337de42d835302e2e41440b3d92cd737e4ed5a073fb87b09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152931 Malicious code in astia-ala-mali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d7bbb836dde0ce2119521545b3f4fad495f266d8413a436218c6d15a491758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155804 Malicious code in huda-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766185ab8fbf831e64fb23f9a7e716fc84cae66cebab3072eb95c2fd91073f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160786 Malicious code in muda-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff9e9d4cbc1bc255c669cc9d675e872c84eeb24143f33079573756ee84f41a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166931 Malicious code in teagood-lokika64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ac5cdd6b32b006ed3cfd3f207a8efc77d5022e6aa9e0ae571cc92d14c28861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154735 Malicious code in dioalgo-kloip-kakasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc6d9ca48cf76aa91005c4138e4fca0317029fdc426b6f7219ee372699fc649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162896 Malicious code in nokire-loklok42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d770045ab83049e59f5fa08704f7035f23693fc03a3bd62259eb2eeacbe7094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151333 Malicious code in abih-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95d5e8d8bddb29acd958d7dea5180edc4bdd80393a89e24d413fea5afbffc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162515 Malicious code in nokire-genji28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d0a6cab7a476e837736a2776c6a3e974bfe1df1dee36537969a164f52ccde3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163300 Malicious code in nokire-rara14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6e8b32d41601ae5fd178ab62861d31cb83a9aeb67328cebb3782e01b4d7b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162905 Malicious code in nokire-loklok50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab6903813492d866f7531a0cfd7264969d4c7e77082b95111ca0226a6f8ba071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168944 Malicious code in tehah-bau-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c1c41da7ee18d711315b9fc536b8559dad3f93c7ca974f3e8a2eeab9af9020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155794 Malicious code in huda-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64fd1c2bbf94e134bc63c2d95152d407c280a9a6840126c011ae7c84c4738c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161028 Malicious code in musasik-nuts-buntali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3098243ef698ab590a9d5fe063efa323d80d73856090722a7815827d851a8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167530 Malicious code in teagood-nalikoli120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c055f95f4e04c9fb39959a32aa67460103105b0846573ef908e3ad072a2cfc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168063 Malicious code in tealove-aruma1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b8b7f4d69f9f0762dabb18f48b58e37f3ad95378bc9e6450f174f1b57030660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...