MAL-2025-150437 Malicious code in @mipta19/sdd-d1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf0772db39c1363ad20ec4e27ddb0f27501d136514a0b4377db604201f24674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159234 Malicious code in makan-amoba-iufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454ccb4a0935b1eff19235ba0675a7c4831d6121c104bc632277b05f5cf762e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169011 Malicious code in tehah-muioa-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420b5fc479c98ecb06f83864a516226e42cc589824a818ded7fea0c099f2ff57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155164 Malicious code in fitra-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c28d381839054181983a08416c7c660cba50776102accd782dd81297f300e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10423a6d1dd6e3a834052a5570bd1c1fedb40a6eafbf192f57ae8495465af131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156821 Malicious code in iqbal-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07dc6c3d079ae3846a29bcd72bd2db7d89bd86492b797e2dc843afe90f15d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156293 Malicious code in ilop-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6626a35656cfa5139ec4514c0d22e4a2b4744412917e92acfad2a10eb71d8f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154237 Malicious code in dajouka-tsfdaa-t6a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86af3bcec1d9300a8670d021916c495b8f67b4a986a2b91e325b0673fc449d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152029 Malicious code in air-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70902ef95f5216486736aaedc05d335c6ae9f52f81729832bfea6e21b99af31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4376c685bc88e4f38ee2a95c97dd547ae862af8aa3bf439c6c5410987c317cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7693a16ffb429b788953613b4b6307dbd8f9f44844654b64eaeab3c003478fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168497 Malicious code in tealove-nice2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31a4a08021dc2c5c793a28c8abe2550cb57520cf911922055def19153a2cb218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165561 Malicious code in sabuvauakli-nalabuaui-lunbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce09ac1f924e70ee18050fe1f09d4dedd248d2438c3265cb9e15b2dd4c9d8592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52105b06ae8f2a6b478894b16bc3b40c70563167630a5aab1e94ab87290e31da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163072 Malicious code in nokire-namiresan21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca032ec77b40ed3505641403db8ae3adfac90238dbf54f6af1bd7de047a55a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155333 Malicious code in goodmanmax9250-failed-molecular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b78edd477088580809697ce8666f8940d8b9efafdb541a14b6e9ebe08e9ae53e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166127 Malicious code in suharta-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92a2c607741415eb3666df44ee6e6d45b3b8610daa2ef300c6f40c146496259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160437 Malicious code in milisa-mioyaayff-muioskfp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f7931a4d896ad2f913131414b569a30618d762781b8fb8f03d110ee978414c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ertacssau-tery-munc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5e4d8ac0b7c61e741802d24a87f4ad051aed93eb9c47f19c0c75ca60e46f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142430 Malicious code in favourite-coffee-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9ca0e2b4bc589d1779f36ab439cb7a963d9e4ffdccc1e2402235e183ddd9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...