MAL-2025-153902 Malicious code in bni-otaima-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf427762390d4f7dca174617178b5f74ee74eef3b27595c98494933e8f722a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150979 Malicious code in @miptaa02/tiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b09bc284d23eb2b48468391af3c90b3062fe2f731b917fbc2daf84af1bb490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163893 Malicious code in nustar-miuyu-muaivcascf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d61c5b2b6ade408cbaa6b314e9e641c03b4fcc2af27d07e937c56ae14a86e67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155429 Malicious code in guras-nutra-dassf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bea3ce897e008572a96d4214d11d7c118df44d0b50db6ff8e51524af9b39d23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150826 Malicious code in @miptaa02/miasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045904585d2da9c118a652a5b3eaaff12232d5485036441291887f7886a6a48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159232 Malicious code in makan-aivamoba-iufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9890ad6cd1bb9803e6e02605c23bd00401834918a9875edb0a8f151b6c500e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150370 Malicious code in @mipta19/genser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab46f4142c2bdffdb07c56bafe93adc77cfbce4b74247fa6b488f6468380b1f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159130 Malicious code in mahnud-unofagoagi-gmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51df2a9e37140fe462e7a18899a12703873e31f766b2aab4ba03932d698fe7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164296 Malicious code in pitra-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe879e5a76f04f2047b16dce666cac6a2db11712f1bf28ce6e4e71779398035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157579 Malicious code in keyla-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbca3bace64e529a9c8da548be8397f6003c52f0b5f47382170a67c01c517eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161374 Malicious code in nabuf-oguuof-dusagomof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a221933d2e857146f6a1cd1720cee474be6cb6a3ad7b212b665dd538a6e43b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159207 Malicious code in makan-aiuga-fia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d288b398b129482703d161769d66e57fbd12a0e4ff03dc78e3b0b83effbfd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168602 Malicious code in tealove-okta25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972aa65b4c2bdfe9627df5ad72a4819e8dfb10160d831e4fb9f2a2f0543343e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153985 Malicious code in butarsui-mutfru-mutyofaoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a78ee7f2f21b0fa4ea0697af2b57e3712043d4a7ce771a4c2ea9cb0368c5e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151977 Malicious code in aibpuna-mobiuple-amaikora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93cc9b48a59470eb8830b299296a403068fa43f8a837f3727c7b52298e705d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154808 Malicious code in ewa-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86f4b47cd1b7478c4890699cd71ebfb179aa350e7c44c430828991b0bb36a94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-amber-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063159677dd77a60ed3c35f0cbe6cf08a1b4c1187df42866d6a13b33c6299862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140784 Malicious code in classical-blush-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4788edf05fd7a84c1d50968e29cb519dd07ef3c4707662ff8b3ca19a6d3ee6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-request-sequelize-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0615cdf2e022eb8e309a233fa7d06b1ed30941236bf8c92a29027db49a27c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-miranda-levels-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c748cdd6fd77c1cae9a437cd5bd642282b813a08cc3826fa783055b41a5c2d63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...