MAL-2025-150058 Malicious code in @mipta1/ingsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adac804db5db2a85c1d457b7ba5c7119cc109f900169cc36f784a6feb5ce052c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152274 Malicious code in alfiansyah-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573d51df87704b3bf3884a52d2b2bfba62e0875aee38cc32c3a96fc2f1d42bcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152062 Malicious code in aji-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3a9b3c49a9d9be8dad75f90d2142934c2b4e12056785248d37f54c094838f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154460 Malicious code in diago-kuli-luvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e73d01905e58f3c27470c958ba5402332591ae485bf4fd6ca80992cf432e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frasu-ofu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771bdc11e20aa5d5f9dd5c16a16962cf834abb3323a41bb2042f521e3c7460b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13956a4e6e8a7951a49b260067054ae5ddf49f93d5468ae1802ef27a45dedec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-naiuaa-sosmaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b707fc8e437ffb18a322ccbcfeb1cb5dcfabd9a6c26396f31788d61b8cdff4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-ras-batubat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96eb5d135a9943d638826a54d8e1a8593e0e09f26c78ad23b40b21363b8d53c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166836 Malicious code in teagood-cuekin69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee859023c690a9f290bb29fe28e46024415c33f8bf2b008c877974b36b11540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151319 Malicious code in abih-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0382d6502e72beca725ba8a481e479e2984343acd6fe759a6f34567a8430a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161638 Malicious code in nabuf-otomabin-nohkkjgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52af942de3c000aefa62482511c062dc3d331ef5942496de8ca79fbe825449f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170015 Malicious code in uinsu-loti-nai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9f53cd55664c2fa935b0b15cc460f4f95f683e1774b517f045fd64dd044744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166583 Malicious code in syahlan-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8819439f401501c18cfe40b53695bfe50fe5d6722d49788960ad7bf777e16d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158807 Malicious code in lookingan-namala90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b199344ff1e1ed663513be5bd11bbfea087eaf378bd68cf7281b5d2a62a37c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152135 Malicious code in akabia-alfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ca4e1ef0d8047b9bfe02a00dae1eddff84746e6f0ed944c011fabf631b9924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160000 Malicious code in manuk-angi-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8ef2387c9a573b2b9068e9388b590e169af8603fb4a3dc403a12d87864cf03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150931 Malicious code in @miptaa02/sadt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8024c4fdfa57ddb89a1e1cf6da59e0fde1c6524eafc9e217411ceffc491ba538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152685 Malicious code in angin-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb874704e04d0e76ed014f46d6a64e3d5683ac42dbdb9bac217afd6c1eb7f99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154224 Malicious code in dajouka-tfsfdd-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e8c560557461789b2a502e44891a89fcdc981195b79e5729c6e5a97598f905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154574 Malicious code in dian-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e08c1d99ed74aa75328d503f37de380a9574c8f56cbbb546b51657befcbfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...