MAL-2025-150562 Malicious code in @miptaa02/denba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc357fecea85ed38951b7aa076b95aa699dc55bd6e4c57cf5e13a743e8a788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151868 Malicious code in aiboa-moloipe-aggsinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86bd9edbeb415a2957ac7dddd9a5d3934faaff2d589cea5c3f61df360f67cd14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159894 Malicious code in mansila-toaviala-madoibsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d2f9411e0bc3880cd7ec26feaa22d7aaae7db93d1885e1600545b70685cac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161032 Malicious code in musik-dai-buys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2015da52b74720e089a6d542d312d5a550a556464f4b5135a646e858ce4c5a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170194 Malicious code in uyafru-tut-dutut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b560abc1b0192c1919823383240f34bca07cde3b2f025b858f6abc524dab89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4ffd23fcf5189972c09c5722034864228d579ec6dd296257e179554db125a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd01fc66abb1fb29110b3a98392272f05909f5ca00a311d8c254db49feb597b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166678 Malicious code in tadashi-tssu-rene (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34120a88083bb73b5fc46fd1ab88ac2f47981251ad1df0c6f07b322d13e7715 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154624 Malicious code in dian-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e767d7ee3cec539d495ce992eaa11912cde6aa32cd9d515857903ee3936ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152667 Malicious code in angin-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b91aacfe7751c6c6ef37b2b8b3e90dac0c4128fbbb161ca9211271a7088f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad61d3f4ca6c6e2d25616fd0e172ef1b14835bf583dd586fbb48cd20e6cae35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166165 Malicious code in suharta-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95206292d5c8bb8f1982063c2e8038907fde26bf9f3b212d4de53e61e817658c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162558 Malicious code in nokire-genji67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba247afe809694e571cff4a6ccaf9646e9b1eb4fc75bea62d970ba8e4d39f20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9890f3d4b656c15ec7a2efbf126ed1cb4d5b71eb3d7cf802e1f0ed2d615b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iba-otaitu-umita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0cf9ef7f06bc432f83aa52b17e9b48a91938c548587f966ae5dd05249c608fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapai-safoamaa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4178dc93056e9cfe33f1cd83634290b4c19f7b708dbb07dd614404a569738bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e114586de5f2db3a0ff546f47119f254cddb78f5a57ffeb150461a687cc3341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169493 Malicious code in uaragia-mudiffa-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d18c7b13c109080d53443b621ae3285c530b286c10500f1741c7d90e7b26dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157770 Malicious code in kuinsu-lukoi-kinatmumai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0ef8ef6655d6831094ada9adc66c234b6bf5d22b7f2f075ba7039a5476b799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ddfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5256ba81a08313f41dca4a8b718525045d71c2aec4c89d54ed01bf694735a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...