MAL-2025-149909 Malicious code in @miftaikyy/roya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08094f72381f0882e2c1cef39d0844cd4e6832e84df61c7d9b62f96934f81392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154605 Malicious code in dian-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5cd3e314f699d6d3b04324a896998cdeffe83cfd404917bbf22171eea1b123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169585 Malicious code in uarfug-miu-suafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9283826942fae70804a593f5414691f64899ddbe80a04766817f7bd379cc1bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166657 Malicious code in tadasdhi-dfds-nssdama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f7a9ffa2e9595b9bb00ca0e1131784d1d372068bfc313af5c90c1d32f93d44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169615 Malicious code in uarug-mifi-sut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77a1b31e245a192acb42c6460a506fb72889b77b959a7cc144d86beab6bb14a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154926 Malicious code in fadila-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bdc9410329eba8199d9106bed3a4242fb7394dc2113fe8e2bc9978250946b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153700 Malicious code in billa-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b456e66a11d210671c72d131a1b1e1f374c879d0ddace8aa2304e562d89f3bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161221 Malicious code in nabila-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d4f7c1a918d52f77264a8fd8cf3565091d273fd2643409134691e47e1e43a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155583 Malicious code in hafiz-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616af81b86d0fc2cd48de0375834fd55c74e1288063aea2b60e5d17fb1e837c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150793 Malicious code in @miptaa02/kkbhd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef1edbf3d48803a50c9d7ec887ef0cb5a368461ff0d2363d3ac7ab74fc278e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150720 Malicious code in @miptaa02/idd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df6d8c2013e24e3a393c6442f566c084224643cc946955cb52be95058f0da9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150434 Malicious code in @mipta19/sceh-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6f2d73223b08c4444fca5c6a80717fc55cb128efd7a2829c7925f456c1cf20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163613 Malicious code in nokire-zenitsu26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ab0747b2a32dcdfaa9df88df5d6638aa4e0eb97a2032a1bfb185581e4cff30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153091 Malicious code in avminah-fagias-figanayofmka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c2641f48f9c6b3d0158cc87a444f8827600f9719de24775333d0dac1e5285b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160074 Malicious code in manurung-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daeaca892a34e89c3311fa25dab91079a773d0e0407f52e4787b61ff1654ddcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166031 Malicious code in slamet-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d1f383ca57328374d755ff5a85b4c0e7f895ef7f5ad0c54b2cb7687223063c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165094 Malicious code in riyanto-110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7757ae5f54f1702892f324f0e8c4d6b2d7c1f47330d9a3f96a2d17c9c792ef9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159275 Malicious code in makani-aioba-ufiyvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af9ac507b5a3980e58268ad44db59ebb1475aaeb6abad02ea93ffefe938c477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168591 Malicious code in tealove-okta15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48364c10d62651ddd0544fdee3a398823ba87504d3041a85cd1eb09d14671b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170172 Malicious code in uyafaru-tauhauimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212f47a4333bd2c49fffbc486ca47217decea0295d54cb76e0838fda2798a6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...