MAL-2025-161540 Malicious code in nabuf-otmbian-ifonabogof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56939cfa881e421055e41d897b8c0131c604aa58c25190fdd88bedd7e9a12d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150720 Malicious code in @miptaa02/idd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df6d8c2013e24e3a393c6442f566c084224643cc946955cb52be95058f0da9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168759 Malicious code in tealoveness32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3993113e0c737d10cdcca1bfa140733fbbbeed2e8c95e4663eba0aef42113ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164335 Malicious code in pitra-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc8895fb1c48e299c8f54deef4159d4154c74b0ebf610c6ba5c3b8fb0fce037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154138 Malicious code in dajouka-busad-rac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96878c5e2d97fe0d69a43deac01da741cf2fd0c46b6a2d7d5e3fd109cd044ed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154188 Malicious code in dajouka-slas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf12e201d68c30872e143f1bc118d39fae77f4184300466777a2680fe89a14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165007 Malicious code in rival-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d50c18a29130728b06e4b2c64291cbda6e83d6708b8dafddd2754f6615f6f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160630 Malicious code in modirai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fdfe217650eba4a4168b8bc605b0f815140ebc90e1fa41fa0ea0738ccf2cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153213 Malicious code in avminah-fagmdas-dfgiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28bca8c6b4d5b66e831a82e62ac29b68b718cbc9a478c0bea0604f9233dee32b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdeabde79d1592b464378d25a95c6c57b3aad5854c275f37dc623d85015947cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotamaiva-jamanana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8811d5ce0480be8dc2955438bd0e697f032aaaee34aea695bdb732e9c7ba95d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa98c0fc819722aac5c0725d77bfcc83521ffccc42fbeccd54a9c2a68049f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e5d716524bc5a00d481decfda01aa1ba8b03ba79c7aa7d194eb5cbc722ace1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/dzfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998f35b4b1c0fc862c9a748e6117125fe0a7aeb6c86b76bf77ed0981fb02c573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kalimasa-nvuba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7c323dd5d992b98dc4e592b9d4efc2fa26958e85c2b72bfecbdb0a82a48169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a4afef2a1e396c5099e6296a1cda1354063ba7602ef08280d2ca823cdddd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87884553c12cff353be878899d93e9d82a22ceb1c8f0090c9519644a36df89f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayicaku-amuinadabhua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db8ecf76072e09e13444f55c6613e317c7b496abf40ac74b4c8ff0bc8f3de2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luniu-kanulanianiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca71950b323c20b3b3aa4629acc18d017d50e501edb6f6777134d028d74acdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93383e7b8abf926feb394e9ffa054a4fcc2a6a3497c9f2196ec24db9133b054a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...