MAL-2025-150431 Malicious code in @mipta19/s-creh-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90f673e18e17904b078fcaff1d7aec22326caafe2b33dd71f7785260bf6ca49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158105 Malicious code in lina-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa29552954c3331faaedc4484d79275d9e4d74b4d21fb871af1deb074c660e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150876 Malicious code in @miptaa02/nyaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d9d3b5ae2e0b4217e9adf4e59a8268e5d25bf0a48f7288f4bf0d1a09750566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157035 Malicious code in jelek-ras-batubat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96eb5d135a9943d638826a54d8e1a8593e0e09f26c78ad23b40b21363b8d53c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167947 Malicious code in teagood-yakuna84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f238a090e09c19d6036219bba0b19864d70e4507225b0dbd7e0b7aefaff07ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154808 Malicious code in ewa-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86f4b47cd1b7478c4890699cd71ebfb179aa350e7c44c430828991b0bb36a94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168602 Malicious code in tealove-okta25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972aa65b4c2bdfe9627df5ad72a4819e8dfb10160d831e4fb9f2a2f0543343e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168544 Malicious code in tealove-nokire17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 010a47e75a17f6f56dc5b53b225a90659a4bd67a192b7247082ed5bec19d9c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161786 Malicious code in namae-nadua-maavwr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02503797781102d77ee474a8d77bb623e017dc5c2fc7f74d2ae69e725695a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167553 Malicious code in teagood-nalikoli142 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4150be0c1196f55e46cecfb36a4d35a01c75fea46f287703c9e87ecda9ca410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150498 Malicious code in @miptaa02/aloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42b5ac383a684b07e4c1284870b2eee48b576f5205998191071be583a766ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155381 Malicious code in guras-asia-thailan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b126f2af2c0c7ec1f9c394c5e976a12f18445243ef01ccb9f20fca243589831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160600 Malicious code in modirai-fia-jsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e6a442b3902be46cb904bcb1ebb698a9c46c0e2501e4ae988e6369352cad189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163958 Malicious code in parwo-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bafc27ab61c9940d3e44f97aca7647140896a4cb9b3e52d75dbe01010b157c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152007 Malicious code in air-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b0ff94da847e2f0638984c15fa443b25104d21a1614303d4a94136e17167cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151287 Malicious code in abiba-avin-au (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855c852ae79dde102cdcd8940c6046854d40e9e88ce4cde4380d45e56b214512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159232 Malicious code in makan-aivamoba-iufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9890ad6cd1bb9803e6e02605c23bd00401834918a9875edb0a8f151b6c500e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155908 Malicious code in ican-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdba4ea815d93ef59ce238102563d0f061f496c706a1691dca59eb206c49c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164420 Malicious code in polymedr-mindatas-bui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2990fa279da9ff0cde0099172f9f949a677fc6e243d7ca265756fa88fe3ca382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169529 Malicious code in uaragifa-at-usafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724e6ba8fda659b7391d4e6c87bdff0aac6854dec8a0174a3955e5e817047413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...