MAL-2025-150852 Malicious code in @miptaa02/msysaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28961da995365caf5b3358f4c39998386d51ca8a95d889fa83a06cb3d834955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151001 Malicious code in @miptaa02/vibas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 736808fa2783dd91190069564969787ccf688246f619e54b08e637283af7b0d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153474 Malicious code in avomainah-fagais-oguyada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdbdb6b4a4637f4ce524b867630d868b6d57765175465dc01c1cbfc8d698668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150822 Malicious code in @miptaa02/mdsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba18e9b77e30f3f7e914cb7fc532168c9d8fa8fb55f3b03d4d0acba218d2a6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160531 Malicious code in miracle-doki-uini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe6a24a9183ef5ef64c4a6a3f754868723b5a11d0582fee96456da2337250272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157568 Malicious code in keyla-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d230badedcc2ace69cfe9af425189d90defd5e73e3686699b6122ec8bd3f144a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152475 Malicious code in alvira-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ceed1a213f0e85ca4c3d612060494b99514634b633698519b451f26ddd8dbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152045 Malicious code in air-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e9bb544e7695b5b9ad3cf8e3f8799f82fb4e3800aafb284eb64cd6c30a4daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167638 Malicious code in teagood-nalikoli8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 196bc451509a8c10bcf06239078aa95d9dbd76ed2817b09d704a5d1e7fb1a890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156694 Malicious code in inufgi-gotmua-anzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf6e170c65b471e463fa9aa7411946b063c58c346244153df9b522d2a2e4b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161636 Malicious code in nabuf-otomabin-njsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecdc2fb593a4e7c053995150d68382b9c22f55498167c316a366aac713532e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167873 Malicious code in teagood-yakuna17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3035149021a2655f44aec750d1383df149e61c78af519d0cbaa7d0a948a52f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165376 Malicious code in sabua-muhuyau-tdiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea98f9691899fd5c495f769882565b9bb9dc15242588f84a11b5f9711aacfeb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164414 Malicious code in polymedr-minadus-buie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f866204b08e49786bab69eeaf349b28664138d1d988a5d240581ea41ff715f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161503 Malicious code in nabuf-otin-agogas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d793d96b9e2d4f9cb1ebb19eaab640787416232499e2021e418a984f8dfaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166228 Malicious code in suharta-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dabf70a1c4c80a397bb902293546cc17cb3063791909c3d3fcfeaa29040d5233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151942 Malicious code in aibopna-mobile-araui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278618a73a8dd0d6d8e5afdf7ac3fa632200f9e3ff3cafafa2cdadc2c933981f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155013 Malicious code in fatidra-nutayua-isuy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b5f271a2727c99be0b8672f74df8daa59b688951ec766dd04b232e6ce800a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150961 Malicious code in @miptaa02/taiap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3467b8d073ed1e614268354ab08ed595b8641337f348048f9c111ddebcfcaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165214 Malicious code in ronaldowati-cir10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aa153a6cb1be56e6f6cb5e65534b2710893fe58abf9d568fd0f1a4d993af55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...