MAL-2025-161492 Malicious code in nabuf-otin-afofagoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3422a3efcd8060fdda3367c60968e2e2c98f9154c8734693953642234c0784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168944 Malicious code in tehah-bau-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c1c41da7ee18d711315b9fc536b8559dad3f93c7ca974f3e8a2eeab9af9020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154279 Malicious code in demdadf-sadudar-ado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb080b4ed5656b9ab5867a83060d7d508b761e46ae61eb4af640f95fa9a0de28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152592 Malicious code in anaisia-pafi-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04962ae337cc1ce00442873024b80c710d79b4a2452c2442c3eae086be158b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152110 Malicious code in aji-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df14e4aa6aed135d0a26c74e249920ea76bba4084aea5a551ea4813e14185b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159701 Malicious code in mans-manapa-riskifaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6799eb5f199ca56d42e3669bd01d23fe858124b33d2e7aeec16651f7df00b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156316 Malicious code in inagi-gvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8dfaa9e13485562114eee2d3f153bec3bb4b3814012c3aad88ab9932267df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151370 Malicious code in abina-amugi-amiataamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe612066c87d3567f539ec20bccb49f10ef0a5e3e828b18943d32017c8cf799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157889 Malicious code in kupai-lukta-jol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03857ae9573bede240db67e663ff44d1181a566b0922e4a3ad9d79445c72956a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162872 Malicious code in nokire-loklok20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b0af9676c19ced3467255a64d0b8ca21b77ab2e0e930c3983d5e0611ad8693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164347 Malicious code in poli-aki-alubanna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6b2c3a22177f1ef69dba54d092ed9b4f83f4046f77e89c846f5f65c978092b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158199 Malicious code in lintang-tea4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba102372afd3f32a955676580206d54e0a4524c05d00582752d4941844621516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157607 Malicious code in keyla-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c04d2dce27baf650b45ab6bb757954893aa4d06f0c6494cdaa1b2a8d407298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158622 Malicious code in lookingan-namakita14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58cf620919b5cf59cab69857d22b430f684c1b203b1286e6733b9744302bd84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159197 Malicious code in makan-aigomoa-iutamafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c2a5acceb5441fc54cba624b9e557ecdb8ffdf0d7ae978936b8bda5df73e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164847 Malicious code in rinto-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f87f08135260634e007d7b11db8f9d768428cf288a5fe49faa55bf70fb1acdb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167733 Malicious code in teagood-namakai75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02fe6e5b6ba47f69aa45f8e6d0a8ab7d048b4ef3db5e48ac1d819542809e878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150206 Malicious code in @mipta1/sardpf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4351f3e10c2706c989afdaa9fb698d78b2bece83c03ad7f7a3d4b34acd8e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150961 Malicious code in @miptaa02/taiap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3467b8d073ed1e614268354ab08ed595b8641337f348048f9c111ddebcfcaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155216 Malicious code in fitrok-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765363fdcf411d262505e3f74f4a54e7c03f81233baf0e0b3c988e927686e14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...