MAL-2025-150084 Malicious code in @mipta1/iyum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83efb4a1cf71c72194abb7c57b4a568fe964f8b885624110a31ed0afeb1abe5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158992 Malicious code in madan-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f973dec5c14b4f1d0f909445396b6fba46de816b4277c4734e968c6db7f8841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169583 Malicious code in uarfug-mitu-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e111c5421e27746bdd13f0904c696f9b124bc673b23a13276808648428eb98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169240 Malicious code in trevora-cir45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2179988984290601da35bde1fd65f8b008e44e65eae4950123707cd50f1f6b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154883 Malicious code in fadila-poke148 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 340d0a6e41321d799d2aeb198f817901453a5402b7941f4945c537159e81240a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152045 Malicious code in air-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e9bb544e7695b5b9ad3cf8e3f8799f82fb4e3800aafb284eb64cd6c30a4daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166726 Malicious code in teaa-reborn3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32672c055e26f78f68d3852e81636d1fd856f557727801718dee0d52035e55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157832 Malicious code in kuinsu-uuki-vilakunanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7ecd47275d3002a1abae4949852db4ebee53c91566d1816eb5d5f6b03b4735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160531 Malicious code in miracle-doki-uini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe6a24a9183ef5ef64c4a6a3f754868723b5a11d0582fee96456da2337250272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168497 Malicious code in tealove-nice2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31a4a08021dc2c5c793a28c8abe2550cb57520cf911922055def19153a2cb218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150902 Malicious code in @miptaa02/rdagt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dc1c3f2ef6222b62a4cfd19ab4e3284646f3248057ae85ce94aa973c91447d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162880 Malicious code in nokire-loklok28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea62e0cc7455dee74f65146da70bd663f1e59e9473d77b4d3b4b5cb12ff52451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154752 Malicious code in dioaloago-kilao-akiako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0296fa2392145fd28063ca0931c010380a4fdf608b6f93796db67f185d9e388b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150697 Malicious code in @miptaa02/gud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4cefbe1dba166156c538b31b477276bb5faa15a5d510db5d60ca679a7260fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153295 Malicious code in avminh-afaais-ifafofda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8fe85724761c177eb544b1a30376ad94e0444392313fc4c2c79ce3412ba9063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162679 Malicious code in nokire-kilua85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35eb66c293e4a6dd4a461b9fbd6f8dfb94279b1a199987848f8435ea21d7f0af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159059 Malicious code in mahnud-magu-nugam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5855e733124c252321e751f5d476553d58a4fd34f8b78159ad6d659f7834094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169217 Malicious code in trevora-cir24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5c92ce9902e841c387f7a603b8e8262c20919331d6ae83fc057118ae08b250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152528 Malicious code in alvito-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0487dd56c1feb553f026bd209ee47a35310ddb930f8b515378be3898058abfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159407 Malicious code in manadsi-sdada-midadarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c764d29ce582ea2fd479f776788995e83a12f7b06e88dd7f7e55c43cc99f15b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...