MAL-2025-156630 Malicious code in inufgi-gobali-janualai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 575de2c5bc3d8a4eed4fcd6105f5baec858ef85e9844941a23546a472e56f73e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160852 Malicious code in mundya-misptasa-afsda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9d3348634828e9f6b15df58f4685b8b266bd25e0338f7ae58529eadb2c9354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165683 Malicious code in saku-au-idaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5971af0525fc0832c8dec5a3cbf5cbe47b6c90600ecbe7fae20dfdd33bbace0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161629 Malicious code in nabuf-otoin-agfgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934e793ed0e582d7456fc3e2e93cee51f848d31a72dc4896f1dd53915462eca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159357 Malicious code in manadi-scisor-armana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c42b56089205ec6cda749d3788c9c47bb3ace7e5523f3731b30f9ce199cab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162593 Malicious code in nokire-genji99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6471b8cdffc1e3edb290fc0ef19825071a5db4e152005c1a280262cdbce4588e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159847 Malicious code in mansila-tila-mazol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3becf3319a861ada64000aaa299366921897f1ca1df3ec2ae7d8c8d3c50fdbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154309 Malicious code in dia-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd0769cac0a842fd220e0e01e01faa7f8cc1e51330080a63eb0b94900f5bc3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156263 Malicious code in ilop-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d1da4918d1b3b6c0c3b9d218c40b0c2f2ed08058c146f6629bb0852e5906e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165912 Malicious code in shilang-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c04863f2673aeb8e44099c64e00b8ef7c800dbb9ba8d1ad2eaae10ffbab422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154431 Malicious code in diago-klp-kabamkuloloima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e538087d12816af8fc093380e7b4dbb458c90a4d865c3018872bb0f295cdf30a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157968 Malicious code in lala-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b48b7e0846ebeea8222d715cf0ae37b239ee5f75459159729d7c6ee60495486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162902 Malicious code in nokire-loklok48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d085d9f2e99ec4cc2b86743092decd804113e029202b4755cf833bc7a752c514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150898 Malicious code in @miptaa02/rassadzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cfaf5e07ffdb00357e8ea72b7409a938c7628fb3d7d773fe6f3b4f5ede61969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154373 Malicious code in diago-kamli-luqak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98251c9b916c371b028cb044a99c6b7522fc23495216bbc80d07a4afe8556615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168580 Malicious code in tealove-nokire50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bebdfce55e39180d3958c00f2e7d31f94b19e3a25af8d613cc525482b915ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168893 Malicious code in technical-alnbio-tolnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e0805ae92fdcff4564fa1bbe21003c1ed7c7ce58f7e9c6408fab8425f7c571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155474 Malicious code in guras-visa-china (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2cc69d4f0910ed7ddd48d8bd98c029dcde9aca5d41aa9fa47e98501597a8e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161540 Malicious code in nabuf-otmbian-ifonabogof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56939cfa881e421055e41d897b8c0131c604aa58c25190fdd88bedd7e9a12d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149986 Malicious code in @mipta1/ds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75dd5894d0b0cc5e7a026d501f8bd28790fc0194e9074bd031746149b11b58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...