MAL-2025-156492 Malicious code in infi-gafob-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e46da3648482101d5898ed7a6fd91dd6bfc2f40944e419228445b387e9edf5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151037 Malicious code in @miptaa02/xd2hdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c16f873b49f5e97109c9965c526710098faf50a1c82f0ae095cbfeab7ea5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156177 Malicious code in ilal-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ac0ea6215eb4c8d8c976f2964d98a8818a0e7986ba5a3e18826d8272113868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169440 Malicious code in uafagarug-midefa-fatusut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d8aeaf98de0a59d1b262cca504bbad534034705230dfbf5dabc3907ee63f701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160307 Malicious code in messi-di-ige (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c89e532e4ecb20af6e3908df5ef17d64c6e8440c0ec189288589f12ace6516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160413 Malicious code in miftaiky-suggest-southern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd1424a38ba2809817a5e5855e615ddef3f1811b72c1613250ccc166544025e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153686 Malicious code in billa-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07aa5087a07258dd8fb3a5de81b400b496764a755915328d6bb6cfb778f2147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162341 Malicious code in nokire-arhani3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd06ae0e73bf4d42c8f804889379cf4c5422e1718d100fb0d8f604c4f1137a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155896 Malicious code in ican-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcb9ebfdbca8dc56dbeb28d4b38ef937390f48fa487c7cc3b256ccbb593cd3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166013 Malicious code in slamet-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02261c62bc30e56b5f24ed20a368a2993a500f1f904a59a39ca79fa420f84dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160373 Malicious code in messi-tursah-tungg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ddabc8e6ed0ed830ce6ea949c6b2e59b654ecb7dca0b343b164a2268310fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154834 Malicious code in fadila-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e2079d6201e8356a4f88cca2a80b79cf34dffdfb05f39a6cab4b9fcbbbeb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153796 Malicious code in bintang-tea5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af727aefc9a7460345bdc06c6396b8a6d0d6e1551ba7ecfb6decb08413cddd15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161271 Malicious code in nabila-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b49b20e672f4ab45d889567096d7cad2152d0a688df8c2e6bed7d4dda4ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165352 Malicious code in sabua-muhay-taum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1dc4d50d5470bc8474db2c84d5fc96d6a8f76639530f3f405b36c7b3984307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170535 Malicious code in wulan-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf46a00cd6e1f5f54b8e2d9db83f043bcfa8ca8199ea26a043e1783492f0227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153543 Malicious code in avomainah-fras-ofuratarau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1240e06c635b48ac3403e4abd6f3fabe5c4be323d6ede35b92f8cb85bd9d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170238 Malicious code in uyifiuza-iytadut-darifufana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5965c63095e8c2de6a95b7602b24344987045ce91bc67b6441db336d48a8fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152409 Malicious code in alita-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7f3a2391ef64f988b44b53e7700b59ec9447adc152abf510b05f137db12bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161549 Malicious code in nabuf-otmbian-nuytad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028fd8087bd5cb53d0565a295f8b8103ce95290bd40477f9400dd768de5f689b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...