MAL-2025-150628 Malicious code in @miptaa02/fgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6789174c197ddaeb3f8985e736b0a932596894eed37b0cfa63d1e99b861f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166704 Malicious code in tea-osss-tepanid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b46c738224f56954bc3e46b91b72c93fb31e200df3ad63cff91f942d01e917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165942 Malicious code in siregar-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6222304d2d9b1588fef8760fae9a39bb353537c00109fa6f32d77c47929a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157203 Malicious code in jurss-gsswa-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1fe6181ae3f1e4efb6b28958b34cd6be845aa299deb89bbe527be7691e73ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155854 Malicious code in ibanun-ota-umabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950ca1f65170983e7c65abceb14948b4699326cc09f6381ffa935d84d919c226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170269 Malicious code in verify-aikn-smisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333e1759399d850232031406b7285c368c17619ef339ebb2064848f782518b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152526 Malicious code in alvira-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4827d57ebb8edcc2c9b9f56f4fca6ed1d304b655e99e9c4bc8134a03a49cd249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163722 Malicious code in nudela-af-gaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ec0f43113d360fb0c67aef80decd42631f2e41e910b64eb56cdcbf311e126a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169492 Malicious code in uaragia-mudiffa-sayuguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf5a08412253df7dba9623ee1aa86b0da6a454c56c23ff915ef6e429025cc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161707 Malicious code in nabuf-otomin-nosu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a1c721c973064ac7376c940cea4c11ce0530b1da9ac7e4513b4f3d393cd6e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164425 Malicious code in polymedr-mindatas-buipenaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098d8b15a49fe16b9f696a04ce0f99165d36b9d23c5753abab8acbed65fd7daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150573 Malicious code in @miptaa02/dshg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa14715a954cf387f3957548a922ab0b51f559f940e6d9ff8e2c5b7b86f4208f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161272 Malicious code in nabila-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcbe3f7eef5fe1fff079af0693eb58fa16b2501032a9187a4342a424aefc41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162456 Malicious code in nokire-arjuna43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c52d49ef1c24900777bedf33413e84c5e0db2c4a234132e5b03ee916e5f4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158708 Malicious code in lookingan-namakita91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42769d4bd14b2bf6264d38860105a106241375f5665d4ae0f4feab8f4411e7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165840 Malicious code in shilang-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5118b2f0a19fc81343921ad7a7e655fe20ce3de24224ed65bb39885f0fc0f064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160249 Malicious code in maya-teadf-daf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dbe60c76f76ae046c2393fa0d2453ed40e1979a62de3f1de114989a1db17599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165492 Malicious code in sabua-muyau-dafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cee6763db21bee73b7c8ccf5cf46ade4b180c47d3654321576fa5f5912919e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166653 Malicious code in syahmuda-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab630cf42bfe868f39432aec17ba11b434c8ff441381c398956987794fca8c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153427 Malicious code in avminh-afinaoofssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff64ec1120c6a75d49b7cf094e04e44426c7cc42086fecc8cdd5cc17dc628248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...