MAL-2025-159513 Malicious code in manaf-assin-muanst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd47c23ba4b6b85ec3c435073c2f8e736f653971a353887229b69d1b5e6f56c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149912 Malicious code in @miftaikyy/rssoya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25fb70be183e49c658b196371227e5fd8726a22f58dff852fbfb34da44c8317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169167 Malicious code in trevora-cir114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2073bb42f22e151b9dc977051068682229b6406d57b7a7b0244ea7eb20d19710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160041 Malicious code in manurung-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715acab9ae4d0d0a3aabfd64dfad8aa9c702972b60f5f800c7e4e2f1aaceaabb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167672 Malicious code in teagood-namakai2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16aa453fadad8afa71355e9075bd3102b3f6921cbc88596e9900507012c0b66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157157 Malicious code in jurss-ga-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50acb305dfab9c06b1c73f9276dc71065e28a0577959de3cee68ada609cde45e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159454 Malicious code in manadsi-sfdada-mabdva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f7e08ba333aacc94993e4cf1f0034b843d08608ca39c76dd96e0c8c648ac53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164592 Malicious code in ramadan-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77ef71b81fbcecb38c85e474cedc0ff6c98fee62b2d83a4be5045a9735a42dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163216 Malicious code in nokire-nana60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d551bf235d13e3d6d09071be53ff1157ecdeec15fddd8660ed6119590b94f8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161008 Malicious code in musasiak-butsd-teru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19351c2bdc0bcf7709e31da5a408ff7fe81dc0ad893981308465c402e55d6c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154377 Malicious code in diago-kamoi-liumaakoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b18e336a194c199d7b70b647c13cb5e9897e1ed1f76acf0a91de68a300fdb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170058 Malicious code in uinsu-ls-dinab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada19808dd972cb7f399ca8ca1716a83aea2a44f0f2f00c5b742cf14ddd45165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163366 Malicious code in nokire-rara74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d48666a7c33cc10c87fc1bf9b3e9850ebedd57830a1b0f3230417ba7df7e95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158180 Malicious code in lintang-tea22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b61b21dd0d8533a604392eb4d33875dc30617eaa4525aeed614d02b8a27cdab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161024 Malicious code in musasik-nuts-bun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18656777c43ecf87d4fec87c1be10963978ef2a21b3e87bf7544dbf3aef570cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168859 Malicious code in technical-albio-tolimsyur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65085862fc3b30ad042a6769cf804a263513bae5092620b5bbfbce1cc844e294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158949 Malicious code in madan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba38d4c8dfc78ab651908b5e03811d27c278b8c7225e7e276666e91693c3bddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160473 Malicious code in miracle-dibok-iku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99eb334653ccc8524cef0ed13c805d0995d2621129e34544d85a8e4f64f6a587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156684 Malicious code in inufgi-gotmaa-anamufozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b755a928ebb671e401e76588a9c9188030f4a0dcba9975ca21e2739b8e99705a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150561 Malicious code in @miptaa02/defhfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fb16c17110305edeeb4d8f4db8c516969d96092c2918a7b7d898801982f06b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...