MAL-2025-150166 Malicious code in @mipta1/nhida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8529c92494ea971aad6653c19b801f9026ab88da1b4c546d913b2f7122c00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164676 Malicious code in rino-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323c4203bd3f1881f6dfe5e388f9ca02ce9f1cd2b7d5a21b1ef75d6e8b314d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156550 Malicious code in intan-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3189d13ad2bfd58d57dd094e5663c6fbd6c51d565cc8821b30c493e32de127b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153225 Malicious code in avminah-fagnias-ifiafagigaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc5deae1aa735a2237946dea2a2126be972ae8bf24375ad3e3299421433897b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166834 Malicious code in teagood-cuekin67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b74684a069e58890ec6940ff12e6a8ec19360c0645c261b2934d6e872f19ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169269 Malicious code in trevora-cir71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c26cb5bc50ea14f2fbbf03bde21f9c3f76244844a884d5cda35e537bda03d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162645 Malicious code in nokire-kilua54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964e16f46416b1cedfe7240df501568bfbdf15b570d8474b82f353a1f299bb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151430 Malicious code in abina-mibiian-upaimumia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9693ce0bbbe745088a53060533c005019cbe9c000b0a46afdf574347e0e96095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159920 Malicious code in mansioda-nona-mugiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269447ea89dde1cd31b6423a9476593ecb0f70b00585a978a6cc0369f2c4368f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154802 Malicious code in ewa-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4592e9f4c286caeb521f0ba92fd66a24b3a1e16757c884f5d5387417dba1e6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153614 Malicious code in azhar-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05b7ed8159fcef342da9b93c58c35b280639ebc58d37bc6d92e421b1e5d9c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156521 Malicious code in intan-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e434f7a849797bf708a48fd78a4aa65dae20f2df8c9f57cde635147f01f4a129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166388 Malicious code in sunderan-udiak-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ddadfc95fc3051a54c734bf08fda1a31fcbcc6660be256a507cc0e517bd31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153278 Malicious code in avminasah-aifomgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f40b135053e3f7f8969ee649f0ab60ad4686aa0baacd182ff38ef956188183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153759 Malicious code in bintang-tea12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7100e05a51363f839b8ea14a8929f0d309de1ef5f3471109ec0cef5d1669bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154473 Malicious code in diago-kulio-luokafaumauahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263f78d68ba991998b5c9554ae1f6c9f6b1d8136bc883c5c47aba4b5c201cf1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157960 Malicious code in lala-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae730593326c658099057f84ebd89c8e15b1e471bcc4103cf5fe14a5b1c42ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164740 Malicious code in rino-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3be72181aff8d95d929b8655ec1bc0840a2dd378b6cb23161900fd55eb37f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155131 Malicious code in fitra-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0317031787d3fbbca1ed81572a7173e9e64d1124517463e73f0d00df0a2161df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156463 Malicious code in inal-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1c7b5825fba776f8c1df6a426e94c279b90166e70d94b3558be55734a3b5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...