MAL-2025-157545 Malicious code in kentung-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af40890f1f37237f0fe91d54f6dd7cde7a9a52130fce765c71831023b555393c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170402 Malicious code in verify-ayica-amuinadbha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2bcfd8622d4225c5fbc3d0cec73a640c8fb283bbc8e97439a79411eb5f040d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164547 Malicious code in prayoga-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e03a42cdd4f5aac47c346804806f6989c4d15b9f24d4d3d60c292826da7a53e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151027 Malicious code in @miptaa02/wfadd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bfd1c851de3f4127e3e2e0626e9a1f52af050cfc0085eb4cf15f920abc92dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153508 Malicious code in avomainah-fragis-oguanuafoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f6fc703c9573b995e51b1c9fc485c17c9db8298c2eb190e5351282e1ed79a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169904 Malicious code in uinsu-losit-bismsau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc36ef1cd9dbbf47b1ea48d754a410725c6b5e833d57d425e5134df6cc2bb3c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168390 Malicious code in tealove-nameka1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a340572e0fca110e71c146858214d0b1b289093de2954eae881d7ceeb8c68c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165968 Malicious code in siregar-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211e3f9177a063a13c9de7e9f75f71b92c61d28264e4f5a669333bd6fbf4489b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165191 Malicious code in riyanto-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3cae9f895c82b0540a0d038e170742f213e1d856c1d5d1fd4a21abc20688be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fianuaia-jinanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92beee8812e9f4d1b4e3ea40a365a0faed529bd2935fab12bf9e079d653953b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149994 Malicious code in @mipta1/dsfsia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2e0e9d6bfbab2ed8c58f55169df71479fe53436d257a6beebeee90771a5d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161664 Malicious code in nabuf-otomabin-nosafyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d29a4d19c7abe0f8188d9304876ef8c6fd6311513705f23f6b851f7ee0618c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165977 Malicious code in siregar-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0600dc8c4859effd1ff524dfc2fcb4c1a948175fd720c22db177075cb13941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153147 Malicious code in avminah-fagis-figanafyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb619f73fe70c409ae65ee06a43657b7c4f47f7ae1c5d61dd028d42375a079b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151856 Malicious code in aiboa-molipe-aramia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6514fcf87f3d40d0b43ace4f8b1a2925e43b88f5552aaaebabbe780bd06b13e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155745 Malicious code in hariyono-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4643810e5af272dea3c220dc8a013545cade3e5e5c09f77800da5fa1236c66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164001 Malicious code in parwo-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db2a87daa5fb8af0dadbcfa299c9f6c948809147fb3ceb08122b64a64007130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165181 Malicious code in riyanto-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bb35e04718541b0b53ae83cff506371c8f8f147666740967b6b1f3166715e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163118 Malicious code in nokire-namiresan63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e34531fbccc9091852d6baca12941a77dc2d14deb005b3dafb54198a5f4965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163179 Malicious code in nokire-nana27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efca4862fc50f6957185c0ca3ac25454d4c7d3b7c03e00f04c2fc1a9624f3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...