MAL-2025-150243 Malicious code in @mipta1/sffhssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fadbc252ad3871e24286f8f3dc2c8c81000bb13a9700caf9d4d6412015016eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165644 Malicious code in saku-aiu-idasdssuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a685b3e1bacf67dc1dc41c1a5e62aa583dd0f04a73be1e3120c8d4309c25811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152335 Malicious code in alita-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c26702fb24f0a2b66317111037d1b367d369fbb803b8382eafa74be14472566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154373 Malicious code in diago-kamli-luqak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98251c9b916c371b028cb044a99c6b7522fc23495216bbc80d07a4afe8556615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163492 Malicious code in nokire-sekiya97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 472efd8e5ebf2f535f3fdd1c68cfed6802292e11d60086eebd768617e78ef721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166285 Malicious code in sunden-diak-nulin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99eeb8a77d514e1015ae05126ebf30380534293f124258c268c2cdf4a4899122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158169 Malicious code in lintang-tea12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bade00cacfe224806bd0338c1a89ebb634ffb58e391cb72cb04b57b1ab21023d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161933 Malicious code in nasrul-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ff7e71027af9ff5759d33a93e6b20366687091d7a33d7dd77e48603df9fe31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151321 Malicious code in abih-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb2b5ea41ca672feeb2c29fa69c27e9ec09052fcaa01504ee20411aa25c8e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161534 Malicious code in nabuf-otmbian-ifafonbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc22333e52b07cd9cbc13cb60df48f50df1bbc779c717e5819dba039692a1712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155972 Malicious code in ican-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa1cb93a76fcd0f64ef333317ab6ed1d7373e9799b9389a4c44868cd8a31814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156695 Malicious code in inufgi-gotmua-anzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe47eb7a957ec24de455aedee8615f3858e8a03339f89d61f3307c942a58e5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155807 Malicious code in huda-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0b4b26b545ba7c70b4a25b6a570adcc44a48500533911835edc8dcfba932aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163779 Malicious code in nudela-gagaghagafafh0fhf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d456fc98c08c26e35c5e15fe52da0c2be090471478804c5e9e143610b2a8d409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164323 Malicious code in pitra-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997d2a8582f5e82b6d23c39bc595af0fdf2cc59543675ee834d79efd977c83bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153108 Malicious code in avminah-fagias-fimokafigugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51871c6f9046d10573bcadadb93ea0ad5442a261e69036acecbaa2eb05eb7900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158926 Malicious code in maalasha-nut-be (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4ad8df8629d36b63993d07d958547b2a02cce79c75dc3c64aaa8e159e4619f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157716 Malicious code in kuinsu-lki-kopanunataiabumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2bb09cb95e020d9e40f396c4456292c758f330cf52e7de8e5c014e729bd012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168513 Malicious code in tealove-nice34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b33f6d67d7bc0a181c06d34a5f4bd297240feb8f5e5339ac82f7578bcab978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156391 Malicious code in inal-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac9986e5438a5c21968ad56974e9547584819a8ae747104663bc94fb7e7af6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...