MAL-2025-150088 Malicious code in @mipta1/kalasid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3185b2a0b6b1c1b675306f7631cf00991d75296908d2ccf488aef1a711d218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159194 Malicious code in makan-aigoamoa-iuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1abea32302e1142058593ddda550633fc6df543c04a9eb2c3b81d576d15625f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167723 Malicious code in teagood-namakai66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230344184f8e414cc7cecb109989c3ff76947724629aa233dc7b5be5e23d4e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168624 Malicious code in tealove-okta45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756f8f3ae16f97cc23f41c3dac175ffad134707c098dc668f45a7c60812b52d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151544 Malicious code in abu-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3536025414b7c383c0eee603ebc226be2ee50a73d7fc5b381a1839ff247a8af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162877 Malicious code in nokire-loklok25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ea410f1e35b9b184d0a1e54c21d89c076c3016c5d673b22e47581b46e5b253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170187 Malicious code in uyafru-tuitetat-dutut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e19936bfd973050a2af847ed26323387598233965c1596f904e194ce6fd247a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161794 Malicious code in namae-nadugsua-maavwrik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63e6a4e3bf4569c78a81c6f0e204cf227ad3268dd8d780cf692157be556ece5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150566 Malicious code in @miptaa02/dffg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8e0e66de984f3d7be61267b681cc1b54056ef14bcb6e6a36b49e025c4ef541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157556 Malicious code in kentung-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4163aed1d076846452617420160a0232586dba57c0bcf855fca81c1b9a24bb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153907 Malicious code in buatf-buaat-nagt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ed9acb9bd6126969a0032ea6de3c3758973b89d5c4ea2dd6afcdd3f48eb9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151935 Malicious code in aibopna-mobile-aramafaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443d9f589623bd18be6a6ac815a9e36d60129bc2c7f0ffa3be96cf1ba648c29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159820 Malicious code in mansila-tiafala-magolollani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43498bbe80c459f548108e280167fcfe8c2dea624d15b3386951fab6672e903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170281 Malicious code in verify-aikun-mika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6ccc85730f4f1661261b761e20603c1b5ff53124e0569c6a81fe5449bdf485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156001 Malicious code in icha-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68f2c7ba87c95595c06ab9753d4a8fbf860e27b12a1569857a357069fa6114d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166325 Malicious code in sunden-dibuok-inui1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1ae41f31d4e314e3504c81985a34a36fb48cd7c188464d19df89457c204638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157589 Malicious code in keyla-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e45bbfbe514e13899b0caee53a428a613c3524ef86d02bcd2345f35a50eaeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156408 Malicious code in inal-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e6a533c3ffe94702afdac91dfa0ab6e7f0f340265d94d71bfd2e1411ffc538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165087 Malicious code in rival-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb542962e1a0df86e97d5fd5dd797c654889d6d56198fe02e7727fa91dea791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161019 Malicious code in musasiak-naik-gunung (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ecb37f77825d8a8e4294c9de53f3598293924a61a7b91f3c4c8a2b29c8d6d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...