MAL-2025-156019 Malicious code in icha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb09fb9286901ff7e40445ed548cf13d84f9833430ac5d061d8823766aff9031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150368 Malicious code in @mipta19/g2enser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd786ff1a3e5ba06c97c5c855d9efe606d3c85500fa6b086d2d3d6a1112bf9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154550 Malicious code in dian-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f185844bac4fc72240f2e40baab4e1e3526a486d39aac54384ef073cf4923187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169023 Malicious code in tehah-na-buta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6d90d8d744bdd2d7e594186ea78fc7de1f9e806debc528fda1052d85755914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157965 Malicious code in lala-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1117258c60a659c37280296bc88fc98727155d758c8629a004720e4a33f3682b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163063 Malicious code in nokire-namiresan13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197b25c2451868fd4629059bc893156d3f9a7d72d92628beffc208ab49106341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163242 Malicious code in nokire-nana84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841fbdf12aa2e425a9b6d59e88707de5f186a70c2f4800600b0c2ce3f5a760be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161892 Malicious code in nasrul-poke114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc771b56e7cebd1fbf03e29cb68eaa33c8e350ada2769772818782978606f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158084 Malicious code in layla-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae43f41596b20382a999b2438c4bf974bc015634526a95e4b5264f18250193f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167916 Malicious code in teagood-yakuna56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18fa18ca17d05a04385f45847ce0e7fba21530454be38c3ebfa5826a0ce948ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153809 Malicious code in bitha-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19460ce825c0e4dfb881bdccd7ba61aa89f9d1921f3b9bef2bed38bdea7749b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160093 Malicious code in manurung-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd68e726b040ba3ccc2844b94c0b18755823a38312c9a5a1ec263fe45f033671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150809 Malicious code in @miptaa02/lkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d0eeea77cfc69c80131c387755fb30bf1f684a467a915e07e35de0626b768a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150175 Malicious code in @mipta1/paso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3eaa2fb890fcfadd69a09dd2cde3ee9768c1122ed99a7fd190c971acc071fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164478 Malicious code in polymera-manuyat-muniops (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76114a8d65575d839fcc02e19b6027de76e35f47da7531a6d4fe1e156eb189ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162671 Malicious code in nokire-kilua78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e0c2c5df210b193d7b97a0bfd8c1db6c87295badcaa3cb99456debbc124c65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154713 Malicious code in dioalgo-kilp-akialanuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f54d20f11234e31b9bd129dd3d0bf4c58ae4925bfc1fcf48d57b81b40132ec21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157865 Malicious code in kupa-lubizfzlio-igugfsdsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe4322d941fe2b2ddc929cd42654fdf1bb8e808054737059de8ca7fbdd74a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156443 Malicious code in inal-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39c49b9a22d233b38ed77edb552c7ae8bbc46bac1d6e0ca7d1eed98bd082258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166465 Malicious code in sunderlan-uylud-vamknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cd7c2a2c7cfeb7cb617cbf1d357282776079b6cce7f175d9282acc8e7de7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...