MAL-2025-150834 Malicious code in @miptaa02/mina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002249294b795d9a3fd9c0f6ae2f66963a13ba10cefac47e93f3522ba153597b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163001 Malicious code in nokire-nakala48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba20c1a33d30aaac013cfe3a6ec3afd97c830be0c6096131e20594167651310b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157929 Malicious code in kuroichi12-soldier-fog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2b37669aa915f696bebd60d6253136b66bb88f7633831dd742e18163721636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167449 Malicious code in teagood-nalikami49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebc0b7bbac0fc873a4f73db52b1ed9f35cec636964862586f26386fe03c8fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152068 Malicious code in aji-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25ba9d96763c5f065bc4bd21fd2bf0acc46820fc164911142278b0c01e6c653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155668 Malicious code in hariyono-105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1925f4386e034d95be8f2d9e0406e791f6f732978e7f2dd1c675441d9e6a4a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170554 Malicious code in wulan-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83d7e3a348a2e83a9df2dc5ba40729d9f90c3fb8394365c3715f43c40e3a622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156057 Malicious code in icha-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbf7df3d246291259bdfe77c178175b94f38c80eb270a6c04301eb66c00b20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166000 Malicious code in slabuni-nibia-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d479738a03df6695e2a2c66209ae69648df9c9fd28f76611329ec94127ef5782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169974 Malicious code in uinsu-lot-bisma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec25d168f324495a15125ba9371c9323a299259fd3d7718ffd7ac0516a4b2831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169635 Malicious code in ucok-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a394fd6df1164e4ccde781ab77507d9ffae21aa392374d6ec058f07ad7633ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156585 Malicious code in intan-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b5a333b728d4905db0fd8585e4ffd7e5c776150f33ca8a629557c46aed78d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168702 Malicious code in tealove-reborn27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a9d1676e8c36ed68187c21780214d1f667e9150c23bf866bf3c480d5c9cf8ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167061 Malicious code in teagood-lokina91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9962760bba4d778a9e9152ea6308ab1d215ac9336f7007ebf2f0648a9c57fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165835 Malicious code in shilang-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da50cf69b4e2b025f30bdd8f2ad97a756b7c78a826cab590303fb37c5f42d97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153214 Malicious code in avminah-fagmdas-dfiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a99a39e67afcd5c5666b34c5286179742ed6daee9759209e4436765406616428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166029 Malicious code in slamet-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb49a99078bffe42f4fb5b8af2de586e9b63533edea807fac2ee1ab8ba111d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165451 Malicious code in sabua-muyaig-bafiuima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25a0633c72e0e9062c4089aaeaee00db50bd9ee2c18ec87b412a04b91604169e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156436 Malicious code in inal-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b121246ee29e04986c2cbe6579a0483e79d834ef17d70764bdf005e7030a9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168033 Malicious code in teagood-yakuza72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12447435e151fe8b959cc23d89b87ca7f9772926c71d31c41f86c017e0d30ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...