MAL-2025-153799 Malicious code in bintang-tea8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6475f78315a82a188e11f57c94f5c10302105496632ebc6e4c9a20be0b4d4797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165218 Malicious code in ronaldowati-cir14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59dd0373f5501991694b65579304f5a2b665038d92ef2bdd9f526c2124462159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152029 Malicious code in air-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70902ef95f5216486736aaedc05d335c6ae9f52f81729832bfea6e21b99af31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-iala-maolui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a50c745775c0b617432502f83084faa304dec898e9af565ba940dd50d32061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154746 Malicious code in dioalgo-klp-akauakuui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10b2c8164b88ea5c8ce634a08a1f2acd8554c9a30e7d1c581d5867bf2795e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166127 Malicious code in suharta-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92a2c607741415eb3666df44ee6e6d45b3b8610daa2ef300c6f40c146496259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158523 Malicious code in lookingan-namakiki15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f40c477eb9048a21eee821986352e5e92b5fae6207fbd40d82f3fb86ad3733c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155164 Malicious code in fitra-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c28d381839054181983a08416c7c660cba50776102accd782dd81297f300e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160142 Malicious code in masako-be-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398fe1098bde6f56dc07c7540c143ec5e544478a184bd8e068c6cbabf1eb461b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166062 Malicious code in slamet-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529dc9430a57a407f0e0496ae1be0e175f218386d5b8c6d363a5da87606dd6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154237 Malicious code in dajouka-tsfdaa-t6a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86af3bcec1d9300a8670d021916c495b8f67b4a986a2b91e325b0673fc449d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168497 Malicious code in tealove-nice2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31a4a08021dc2c5c793a28c8abe2550cb57520cf911922055def19153a2cb218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163688 Malicious code in nudalea-fofiri-agourai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3cd3d536f3c343d99fce8cf16dad05156597d888df90198b7dca20c54de750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150437 Malicious code in @mipta19/sdd-d1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf0772db39c1363ad20ec4e27ddb0f27501d136514a0b4377db604201f24674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150574 Malicious code in @miptaa02/dxsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 835e3df2b9d7dab1ed81b2af45f281df638c51600f8009835d287f2abfb65469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164987 Malicious code in rival-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943d5556fef7d03d3e965ea5faa0b4dc625c790bc89752b62240fbc0a90023e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161053 Malicious code in musnisdr-terd-minuas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15a672740b1b1a3b17c54444b11c80857223e28b79490a9a3496afa74ebcbaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150921 Malicious code in @miptaa02/rinyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a2a01ab3eadef7cf5b80be38322e8be2cc4d2d8d97a7055e8643fa5cb72403a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166303 Malicious code in sunden-dibiuk-itan1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed821ab8d2cc2045ba952f71838c00e1d303210d19f3d20e94e87eddcdb26903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158044 Malicious code in layla-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ca435878cf8518b684ccf74b8edb68ff924e94861e97642a9e5040efc1edd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...