MAL-2025-150139 Malicious code in @mipta1/mihfcs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65053a0ea57286c8f16ceb1a00ffe1f36b9b99431504fd2907618ec33e33ec28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164877 Malicious code in riomda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a128a1e9e9661bf5fe13b12740eeac904f8fea27a9662663aa47b463d22a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151097 Malicious code in abang-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97413bded9c81f5de8cd8e493392b08d2ea76fd435cd0c6909df3a729dde67ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150912 Malicious code in @miptaa02/relsazy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896f25c183ecf3742cae4986da7bd180e37bf4b3c826df1a59fd52d0c6822125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153370 Malicious code in avminh-afais-fodafaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426aa283ff82efdceb30323a021e471f7f5e000242f0c9ac676ce4b1b9e211a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169136 Malicious code in toyota-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f533b447942f09876718e53b392b4bcdae109595f4cd3c892ae40efb2f87ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158498 Malicious code in lookingan-nalako84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0b27289c47e663c6eab7c4685244087cf49179c3d9a052691ae2b4e20078bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158715 Malicious code in lookingan-namakita98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6d7570cbe6b9445fc9430a7080bba7cff1cb9d70f38f2fdeb0efcd51d206bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167712 Malicious code in teagood-namakai56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389957b3000a9de4b91ca50dc1771dfcc7e0beb18a9c4c41f6d3d91a3ae88d7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155746 Malicious code in hariyono-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48168366a8832abe0928ca4beed28c91316976f1abe5823904cea090845a6cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166463 Malicious code in sunderlan-uylud-vamkaunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683fbe15badcf0255eaa5d0d8453ac1ab6cd1631f56921ee8b0992f881262086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157709 Malicious code in kuinsu-lki-kaopumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83218c415339022e3b121a49e4eec1c1206103e1b8fddc02178ddda91600e15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156327 Malicious code in inagi-vuma-nnag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc17822ce78cebb529721c1456d9ba1f878a5e1639e6dd8dfb35a79b92a9cdc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152075 Malicious code in aji-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2e80a533b67b712672e6985391aa383cc0541f1faf41fedec2fe5784144162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150334 Malicious code in @mipta19/ad-jfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4447fe5cd8588239ec8b3b8f97054daaeb573c014e06dfdebb62c4d7a59d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154542 Malicious code in dian-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4eb83f6ef69538e862e3e3529e5b29f4ae850b14d5547af6e918a106ec5153a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156279 Malicious code in ilop-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c01a0c6d868f7da648c41d256781344bddcc3be5ed366d3546015ac39dc5fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157489 Malicious code in kentung-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eac191beb99ed70fa85fb5876c0bfd12a6e163e497b5a1350b34f79572b218e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168669 Malicious code in tealove-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af33441bdcd049e01bd2160e4dbf928497702947283412940bce734c156add9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154159 Malicious code in dajouka-dsspdas-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf372b5527de17d387bc83c7ce8a4415dba82e9fdcb4b278acfbdf94f50d62b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...