MAL-2025-150483 Malicious code in @miptaa02/afyab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8dc1d2f3a3e634577b9a63819efcd96b60f5f05898aa906141dcb557ae6a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169939 Malicious code in uinsu-lost-dinabuab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc776c6b1c299b380e52c7a2d8df42dc25036108c222bd30b29d25f3bbad7846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162712 Malicious code in nokire-kore25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1814083bb806af34792adc285b1cff8a023326e2a9ebe06453993af313ea107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163726 Malicious code in nudela-afgihaf-gafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f404b320c1fe50b89408dea2845acbf1717099371a8bf2efbf0bad79777b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160744 Malicious code in muda-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb846ba3be78e9278978e375368f89bd612ebcf9703f3c89fa068dd9eaa777bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161718 Malicious code in nacho-bunian-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08deafd3bdbddbf5ce5f5cbc28be6529ef6252661c07dfa1c1742192a4272f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155489 Malicious code in guras-visa-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278c9154cdc9d769e59b957e9975a02a68ce06e3b2302d6df66f4049b43dfdcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157366 Malicious code in kamasada-nutsai-affa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842e7c86777d759c511fcdfc4c911c045710d4aae5639dcd0bd0b1cb4d3add49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157119 Malicious code in juris-qaspss-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eaea4ceaf1f7897f279bb8872267381f20398ff230071fb775cf433a7a4285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166147 Malicious code in suharta-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a79afde432c5f1bd8107ae40e58a211f15b5ff335569356bd66c93c06294a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160653 Malicious code in modirai-igimao-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3591df27812ac86ec6b93eff91539d02df3211344e25032c0909a86415e28891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166561 Malicious code in syahlan-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cd961ff834ff9d0fd41e54cda3dbbfb94dbe72db38447294b24063ac97f8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165899 Malicious code in shilang-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695921df7aafa6e3f8617204c29e5c95e4ab67e79c908c8a2746fe36322be947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157894 Malicious code in kupai-luliko-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215cce17298ff84c60a80022b29b99e54ebb90052d242a69925fbbd5b1baab11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164710 Malicious code in rino-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645e0f5199f16a8ec1ad94505e7a04a0651f79b01c928660648cf22e597f2b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160886 Malicious code in munir-butya-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7130879b556a9d19d3873891b035441aab483ce4c8151ca764ba1428fc5734e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165054 Malicious code in rival-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f10fcb966718d85921e30d2a9667716e45fb364deb11fb0e280e44b5446e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156571 Malicious code in intan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3352e16327f7d0620ee9a4109ccc31a3d9a7b5d62998327471f46c844efce44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162281 Malicious code in nokire-akaza66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868404630fcc591e57b04620f6113515a030ec272e564102f259afbc1b48ee31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154221 Malicious code in dajouka-tfsddfcdd-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35078afe41a8b23918e2ffddf09d5b6d783c2157b243f10f2c05cec7671f932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...