MAL-2025-150116 Malicious code in @mipta1/mddds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17690f5c3811a6d6f990b5192516497897388698c91cb21a98a7704e5d675fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ac9cc89701e3aa125c8324c7653937291630743db1be59a4870745ee2e84d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152570 Malicious code in alvito-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cce5b61f7dcae6afbf26b863524ec329884e9c322de3fb9ea4237edea0b680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156449 Malicious code in inal-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f20eca48cb9196eb52a80099e89b65173e1a3e584643af7fb9c332d785a725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164514 Malicious code in prayoga-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164a28cbf96ef3fe2c0d61c25e899e0a391f55aa140b112d3b12e04abd06a382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160487 Malicious code in miracle-dibook-ikuka1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe2fd825e7b6a4928ffe3eae643386565eef022f3d737d34dce909bb3802a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166587 Malicious code in syahlan-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc8d1a53183fae0043ce3e4f177941bb5b5e2dedd41cb70435808d09c5585af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160236 Malicious code in mattu-mitboip-butada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a0654c4a25365116fe1163b5517f45ef1f0f763f933f7e9bbdceda7ac0d9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166380 Malicious code in sunden-udilasuinasak-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff6858ced489fc30d703b82b9413ecc7ebd9906d21c85d5a0877a2566f442d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158893 Malicious code in lookingan-namalaka78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49851401c7d9b87cee12072a1e75879bc882d01b853906b6e0a4e1d182d2d1b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156956 Malicious code in ita-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898ddc0551ed8235c4448e0496aba25a4080424a8859f7f1355d981cccb27206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150804 Malicious code in @miptaa02/kwnhghg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3afe58557cd507d5df2dcdd99e60760ab53286c90ee459c9af54afc760aa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166457 Malicious code in sunderlan-uyilud-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae4050a59663fd2b74ee726f8aaf0e859387f516686d4f9421b0d481e132863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167057 Malicious code in teagood-lokina88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd83a63c3403e4271bdfdb56f713cbd93d3c5c2b4505b89e548aec48ff0eed53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150927 Malicious code in @miptaa02/ryu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d13179f102eec07c6341f33622a11cb92adfa7a4ff32effac30f1a83b84aad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167153 Malicious code in teagood-manaki84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b636df2a11be8b762fe1e0dad2aa33ab341aa3995e8c6b6d1cb4bb5cc2e637b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154241 Malicious code in dajouka-tsfdaa-ta12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac6b0cd3365350fd47a7caf8a14df29a9134ec8f78b29db490e127aba343bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154104 Malicious code in cinta-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d799d3819601649451e5a3121671b4c1991201dfea9283ab4f76d1747bdf010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157020 Malicious code in jeep-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62a0264846e000479c61b69cd70e02c1e94da7c8eea99d5cc726ec5b1b30924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155928 Malicious code in ican-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a228b403c9c2a712676492c5df8d1e14b9fbfa854c88ef2b8e0b0a18c150e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...