MAL-2025-151962 Malicious code in aibopuna-mobile-araoiponabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d085c0925ba4604187fab11531644b9cb0c97c24255edfefe8f39e4428f34f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160691 Malicious code in modirai-igno-jinnagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6e040f9ba04bde696e2243fda513007efa5f11e5465ec5b3b27499aa4afc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153986 Malicious code in butarsui-mutfru-muytio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0a971927b09df25b3dabca4322da530d6fc6cc72674b0faa0540ebd890b794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168506 Malicious code in tealove-nice28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f927c9740d12804f853b61b444c9b6f5cd79995a22dff67f921cc4bee9c7714b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151036 Malicious code in @miptaa02/wqh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33874a1ac8a6cf1b4e4d62bcbc3d47d23db3526eb4986f4bd1e6e752fc52832c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161760 Malicious code in namadata-munaro-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908656c7561a295262864e666baf04d6300e1b0d391e86ac54ca4dc54f688263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155805 Malicious code in huda-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3459c8812ac2e7d06c3fd03da803aca397da025186936d3d22ae9b9492a73fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153463 Malicious code in avoanah-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f16ff0413789b46a5e494acf7394036facbf5ac93f3e715ac0f0d8c046246f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162285 Malicious code in nokire-akaza7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9682d9511640302cc5087db1d088a1752a9419d017d9c4f7d25959e459d3fb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161240 Malicious code in nabila-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 904231cb73e4ed062be5b05143bb362b9c66838f88c61d3116288d5f762d5547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168370 Malicious code in tealove-naiman31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90552f97c2b5619b8eee8c7f82dcb83baf8060e82aa2aac5e477f7739b53561f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165934 Malicious code in siregar-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ec095ea9f954d9a39f84ebcf2f9aa2542b3bbe61939e5eb053f92a8ac3abf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170564 Malicious code in wulan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87fd740aa0de337f4c1ad16ca997ce2ea56fad4b137219af070b681e55d211d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169402 Malicious code in tusaaya-ss-r2fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d582b43e17939df7c9b2fa66b23677ddf57ee2c7b0cea874a03152062442fe9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151595 Malicious code in abuibanua-mbian-arta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c93f412e659323e704a38e15f3e7b1ffd10f998bf13fd2d8c2012972415229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168041 Malicious code in teagood-yakuza8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8644fb5381ed223996b13d405665f809f23a1210e5603fb79f4871ce96aa5a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160744 Malicious code in muda-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb846ba3be78e9278978e375368f89bd612ebcf9703f3c89fa068dd9eaa777bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150406 Malicious code in @mipta19/pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c602df2421072a8170e16cf0394c02bdcccf1ce2c4e89683b24fe28f51aa02fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09b603736e78862b82ab1abfea945831cef3d5b1ca053806cd8f52b70cd0ecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4faabd6a842616b99973267ac54e63a2a08806a2f7b0a1ba0d03c8df50107b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...