MAL-2025-155095 Malicious code in finish-sf-mewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7e82112ad1c5f40949b1f65e1e04db0386e5d9d24101e4d92c41c012b4817a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160500 Malicious code in miracle-diook-ujakaaubaik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a3334670495e83437e2262035379865879249a1fdddc2a0d001f3df59b8345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166740 Malicious code in teaa-reborn43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e729f3cf08d7fd558ef2da7ccabd7a229a85ce8ecd127fdb8f719ce3bb7f739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165476 Malicious code in sabua-muyaig-bufuat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2e027604d5f9ec4d7e8c66673fbaa0ae1646e4fd4bb6261e0f62849bdc5e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166603 Malicious code in syahlan-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511b376caf5e363bc753ab1ffef51af9b11f43ae4cb77c1005cbb193088db9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159613 Malicious code in manda-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4d8f190184330c5a4d663b50b9efc67aa7ac3797379bda102a0b4c18c96eea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155150 Malicious code in fitra-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0634da6914841955899afc81dbc57823f29fd7bac2f23d863dc0beb97a92d97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154666 Malicious code in dioago-kamkoi-alasiaaoulima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2dac44903ff9e8ba7c73f1d0787445da605a32bc9f0c243aee0a19eca1cf933 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164761 Malicious code in rinto-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad1942dd6eb446697cf571a0edd13fb6f72dcd180de6779cdc4e7e33b33a10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163057 Malicious code in nokire-nakala99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2b09dfaad015680b9b5af13c5644967c251396971f15a3ef3d78d9d77b1d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167205 Malicious code in teagood-nakama40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c56eacd53dd7472169ece15cc53a9a9c3eab39241987885219ba34f4eb58778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163752 Malicious code in nudela-fofaf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d11dbf5e43de532f976e0c5b46cfb6ffc71850448d16e2a42b6f84f48e3dff29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169483 Malicious code in uaragia-mudai-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756402639ddaa5f0eb2fe282c6ca865575926ed9b2d8ebae64c9e48778b78f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169624 Malicious code in uarug-miuafi-suati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 218acaa1d71fbee10cdde8e191e41207133d827bf13aabdce4198c884b155bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151537 Malicious code in abu-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4af93dfd1ebe9022fc16bbba6c31afae854479bad4951d41b0414363819168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164744 Malicious code in rino-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b792cac3eba387343f6549f8fcad2eb430b5a75eee2b19122ee876247b8c0284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150200 Malicious code in @mipta1/saf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67272413d287ef572b14e89a59ea0951e2b7b0fbb6a6ae278cff477e3a91806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153732 Malicious code in billa-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829cd20af63a97c94e2433820b171ef237236382d715907adf36a2b341c4d828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153788 Malicious code in bintang-tea39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16677a056b7749fb6bece21d8f6e292b0d96f9ec5b7dd0cbd56908470c2338f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158055 Malicious code in layla-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4ff1500b979f7cbcde2767e2e940c95633d5c7f9fee6e960114ee96812227b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...