MAL-2025-150406 Malicious code in @mipta19/pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c602df2421072a8170e16cf0394c02bdcccf1ce2c4e89683b24fe28f51aa02fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156367 Malicious code in inagi-vumayfe-nabfufsia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d5537415336ca4c63ca2db222475ab997afae89a5e8c3eb25d36ec29f5db3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155367 Malicious code in guras-asia-bangko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809939b483ef1d299d67ab9b6abd09abfd1c74834ddb7c108da5f5409d4f8047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158338 Malicious code in lookingan-konami74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 149a0dd8c0c6016a6fe9b5493d5259f43388c8d23564b51bae8823cee34fccf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154224 Malicious code in dajouka-tfsfdd-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e8c560557461789b2a502e44891a89fcdc981195b79e5729c6e5a97598f905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151099 Malicious code in abang-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e15562916d8e44cd51c29a9b46bdf794aa5e66d4470b6a7d0c894f9aadb5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164237 Malicious code in piluka-kaali-bicupaibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d755a57bd465d0eef84ed248a0b9b218517a7b37280cc19ddd04eb7533514ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152684 Malicious code in angin-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c719300e2f1e229f8f46c6e907f1338524cee7359155e0a312f50c418c26c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152692 Malicious code in angin-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d34ca7597334e4c20f58441a6414f98533f0ca4a6c8416766b826e2ab2710db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152650 Malicious code in andriani-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdb6f47b389095664f5d6f2da42af7d72267df253ecd51a2aa97c0d73b1b2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154553 Malicious code in dian-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50671a67bce851c5090999c07f698b105f48c2a46cebe06c6a7ac0d9ab662be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153528 Malicious code in avomainah-fragoias-ofau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f7a75075410b1b95e607594460db1a7e1800a5d0db32165f2526fe1dc27ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166373 Malicious code in sunden-udik-vamuajua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d453357b5e49a633852203eb46432d6fc9a55aa4ed5edb7bebf25c4696cc5cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155483 Malicious code in guras-visa-koreas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138a23e25d6fc65b0b2b5e7a08d64b289dda5e1188e8e0824f8f989aea990c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168978 Malicious code in tehah-manda-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7337a9495d75d26ad9ddea84f92ed98763b87fba1a94865ea92342e3fce1f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163266 Malicious code in nokire-nanali15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc80e33288629f9dc67af3ca49b8505842dfa716856effcdd5a1bdc8b21f5fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157200 Malicious code in jurss-gssad-14s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3055e93838fbe7bb2d80f62c4fbc24a4ee028fdb3f808d44aea93c92f69d4e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157743 Malicious code in kuinsu-lubuki-vinami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b853e455df91891e3abf026c6964a3cbe935adc7570f563e2dda77aeb635cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150439 Malicious code in @mipta19/sdd-s1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac643b4a4e261623aa3edca5c9ca11201f7e17975a7b5300d41b7da9a92a13b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158749 Malicious code in lookingan-namala38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab68b81e07ac32518be5553f62b032900320fbb5942f3c22124c7945790fdf26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...