MAL-2025-152056 Malicious code in aji-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d16107341bfc5656c1cfa808328a74267edf7dca8db3a69daecaeb187194436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160565 Malicious code in mirai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c534b9f9fcd038cd21e2a77eecb8fc104f8ab26fd0df8cbffa2232bd4be7cdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158117 Malicious code in lina-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f8b862a864411acc17f67b84224608dfd9cb83cbb182b6906417e036b73557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155331 Malicious code in goodmanmax9250-cowboy-noted (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f5aa0b9be9537a57954471914a8e744123b1e04b50d130963cd68f1a487b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150294 Malicious code in @mipta1/tyuaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf606ea7b95ddbc85b59e471a0aa616c09338486f971ba7bce122d5f6659ea0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150290 Malicious code in @mipta1/tx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d358ac40d3f2a81f9ef40f1aea21900fd4670fcc3ccbe6c2a672be3138eb534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153864 Malicious code in bitha-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0177595889862c5c177a67a4ff473414e3fb403b86ccbf30404f8a903da6125c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164557 Malicious code in pute-trud-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8c784760bcf0225bed856e428f207ea4095facbd781d4d6e896a01538cae41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154622 Malicious code in dian-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf6956c795b81834891b1338b6b0765141d3aa120e42ef86d9f9ae956f407a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164769 Malicious code in rinto-poke115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1afc31306c55156da72326b6d39835fc31da3413e78265001aa26b5d3db32c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166282 Malicious code in sunden-diak-nulikanukn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfb825c49352fdfd7a5a5af5a5abf062fc25680d6b6dbf0fa9b337e77b1b6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154708 Malicious code in dioalgo-kilao-akiako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f1fd91cde394df4fa970b7436ee9a1e7d943f2976add0ad7090d165319b8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163076 Malicious code in nokire-namiresan25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536a173445fd98506f68d5b43597e336a8b7177d3a724e511a6218153fad687b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154377 Malicious code in diago-kamoi-liumaakoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b18e336a194c199d7b70b647c13cb5e9897e1ed1f76acf0a91de68a300fdb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168995 Malicious code in tehah-miss-br (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a09a93611d5e4e6ef96574356f2e84196488c2f846540f7932a60655201e81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162961 Malicious code in nokire-nakala100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c24f27fc13acd9209977b3f78e072f7bf522f542217686c7738a471ec072ea1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169074 Malicious code in tehasddnah-muaido-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fa77600c15d993f8a8271834186cf29314b383cd678c4a9868100a718b3d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152251 Malicious code in alfiansyah-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276a502aa7e46f66a0408ad56bbc819b0ed2bd2f9d2df48930711fef37b92086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165811 Malicious code in sfga-trud-mutiar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019fd420e4607db13a6bf8574c6716bfc36d51ee4c2c330a23109cda25e0437f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156022 Malicious code in icha-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba0864264f9835d2d7482657c48a3de449c89e0acf1ca8c8039dd2f94569732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...