MAL-2025-150166 Malicious code in @mipta1/nhida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8529c92494ea971aad6653c19b801f9026ab88da1b4c546d913b2f7122c00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164771 Malicious code in rinto-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f366a35c79b62007d795df3130f0a7c25b6cbc53608c62ade5d5bad419fef7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161735 Malicious code in namada-kasito-guta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8a808fa4bd39b3275439ec242ba28e51d6b7b6bf5129d8cbe5eaf3a82a9866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168591 Malicious code in tealove-okta15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48364c10d62651ddd0544fdee3a398823ba87504d3041a85cd1eb09d14671b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155672 Malicious code in hariyono-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41692bfd7637c95bdb6c2a6e740bc056ebb2ee3a27b3c7dd3337b1ac1aa39b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160279 Malicious code in mdirai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0f6c0b12d17380154de5cd2b3b6465620d73df3a7efc286162a6e355486852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163600 Malicious code in nokire-zenitsu14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77167d154123e03860311a47ee2b281dc305388cf3a975266dfd6e010b37f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167916 Malicious code in teagood-yakuna56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18fa18ca17d05a04385f45847ce0e7fba21530454be38c3ebfa5826a0ce948ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169165 Malicious code in trevora-cir112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d487e15dd5469354214e2b01891239833006f7908f1dfe68e17eaaf4e6ee1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154502 Malicious code in diago-kulp-kabuko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d76d15f8477581a538d54a97037e543ac1c8a3e8514ea39a2db40ae9e9939ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163341 Malicious code in nokire-rara51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4bdab486332d0df7bad190dac3a02640a23f8ff1ae8c1ed6261278dda861563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150836 Malicious code in @miptaa02/miqwasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fbc12d1f0743f273d33d0bd9ee7701e4eea8e0fb1deea5dd7c64e194b98611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otiganaigof-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b52bfd73258cf7080273f3da8fdf3cae6813055799fdd8584d0a06f55ffb40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e2692f2e297ef4f44d36b9e57e1fbc55b368a83162e0f29033c2ea75166ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155342 Malicious code in goodmanmax9250-numeral-tonight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b92ba03ccbc31eaf010ff3f8a513bc375f742cfbe0d721bb535dcdfac7ced46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170408 Malicious code in verify-ayicaku-amuinaabhua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10be38c99549595a904b5cda64bf4c733d281719170029f8b6f282b2e5d3a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moloipe-agigsaipnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d6b5b96ebd2b90409f1854c18ebc992b45227c291d9e85f45506bfb01bdc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152554 Malicious code in alvito-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d739d0582bc3d85f3f27b37097c41722be372e03a275098de79cd7f35b76a427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162435 Malicious code in nokire-arjuna24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9b4a6e3f86acc20e09e303ff5e11f1bc2a4de58b4607625e38719b0db50208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165906 Malicious code in shilang-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1876100ab7cf7fa2387e98b7b85f3642ee0387ffa6649e4ebb16706082fcef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...