MAL-2025-150166 Malicious code in @mipta1/nhida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8529c92494ea971aad6653c19b801f9026ab88da1b4c546d913b2f7122c00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168232 Malicious code in tealove-dana26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870da3e28f84bf51a5af27c4957cadc371f3fc1d2487c64cb5d6627335f224e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157148 Malicious code in jurss-cxdd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a82e8662506aee41db867bf34a825af59c3bc7b7716aa8898f3918d439c29936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153620 Malicious code in azhar-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 034195c4ec9d6010c69905cd2c6363b579c1654264e455e608347407e1dd1f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168360 Malicious code in tealove-lady6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aaaa290233f6100a1b2d8a63aa3ba8d435abbc7504f67e7e46e770b7498148f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161685 Malicious code in nabuf-otomabin-nuyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff2fc98fd78d74f9dd38a751333029251dfbe280c7c51a22637e05d07c7279f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151066 Malicious code in abang-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa29e8c7e5b275a1611fdbb7076f6dfbf053c70cfc7a983ff7ae853eff14e69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170032 Malicious code in uinsu-loti-nalasui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3474ae4c0c82589fca1bb5e2f0213db0ea43731149582d0bc03a831cd698bf54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150009 Malicious code in @mipta1/ersisus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c95f24e1ebc2262be2083b7ba6b758ada6c9c312157c197437f9c5c8fbdabfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156902 Malicious code in irashi-se-swe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a75dea3452b14ce5f252a5623b7422d0f398b3e7658dda1cb4bb95a5a772f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162501 Malicious code in nokire-genji15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed148e6cb0222247b60ddd554af3bf774e413c80ecf4a8cb5dd7801a229b69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156231 Malicious code in ilang-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb47064530c55628122c251c58694de35c35e5de7e7d0fbc3b4c61600b5d377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166945 Malicious code in teagood-lokika77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01918fd3b43a46b8ed2c4e229b4473c1a6b42c7f3cbecb7e6e915a512f2c9e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170140 Malicious code in upilka-luzikumub-iluanoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fb79856b584a4a449fbccac0a87dda369ea91cd8fc5b03b4b08449099e465f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161003 Malicious code in musasiak-butsd-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7974fec2bc4750cbc562213688f79e7e82b9ed546b1eb81b6ed930c6cc9b4bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157502 Malicious code in kentung-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc101ec4663e68ef24107519592ea234a3b5b21991e4aff4f3c177265fc0273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153699 Malicious code in billa-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77151b456ed3fac045a35b1a85e644519b65299e4b345a42d8c9933ce27b5b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167916 Malicious code in teagood-yakuna56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18fa18ca17d05a04385f45847ce0e7fba21530454be38c3ebfa5826a0ce948ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160546 Malicious code in miracle-dokloi-ikaluoasak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabd8b3d174cd3a177b58a7e6e1f515fb4a03546355e3486a6074fddae5f36fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160750 Malicious code in muda-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41cb399712f852082b69492d9b21431007b2464211ac8d6f1eb90d9b390a0bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...