MAL-2025-150299 Malicious code in @mipta1/usir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b4b7332b1c567fbb372249e311f6850b91e1a679e62c0530e49f00ea0b3a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170127 Malicious code in upilka-lukzi-ilmuzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cacf61fa2402eab88fa3f01f9d431e5ca767dbe67960cc44bb7d9218b8c6a563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158404 Malicious code in lookingan-nakomi44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360f9b9a842e6c9ca6d3e7130e8b8f698d2b0a35fba8b8908c57b9435d8fe99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159819 Malicious code in mansila-tiafala-magololasaklani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6e86d4fd208e76e5e10e48729413b9fecbd22641230c43cd21d916b55588eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169001 Malicious code in tehah-mkot-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1d59433eb4372aa837283e6fbede20d074770bdb7b3bf6770f250ad1285b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152566 Malicious code in alvito-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bfd6e64b483aa47133e48cb9e32d95b36b860df07683bd15613b5b5f2cee4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158073 Malicious code in layla-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572962e3913f9fc3bc847556450a813fa9084283d047a31458c3242aeba2bbf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167131 Malicious code in teagood-manaki63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f27e67bc4f617180e5e61b9a4fb71dee6e0683a2e8c333e31ae6596edf21d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160585 Malicious code in modira-fuhopia-janiutasu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014c1db96c55a1058b9c41f0851c20c96c9cb60a4107fe6de6d36d53d3d4b380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169814 Malicious code in uinsu-lisa-amaiyaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eb7bc5fbb6c163f20ab8ae187a4739016cd0fcb73f58d361e5616a300375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166377 Malicious code in sunden-udik-vamuua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa76a3813bc5944233afe1b4c80918768e88009e73146a587d294188a9621dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155367 Malicious code in guras-asia-bangko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809939b483ef1d299d67ab9b6abd09abfd1c74834ddb7c108da5f5409d4f8047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156086 Malicious code in ifarfai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29a9ca3ede4ef2771002fcf9e7289997a120fa869ff99684862c9548f1d38fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167723 Malicious code in teagood-namakai66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230344184f8e414cc7cecb109989c3ff76947724629aa233dc7b5be5e23d4e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157606 Malicious code in keyla-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f68004e30c7c695a6e122a44c2dd4cae04548606f283f30851979180e01caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158459 Malicious code in lookingan-nalako49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becc161ed93b8336d000321add1b0b42ff2dd0dc6be6b53c4bc829ed0765c4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-husky-development-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d107cb18863de80dd63b661d6601e6624f0bf076d8e8fce190952de982bf17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-wolf-yaml-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5171dda2e66d0c63bc03ea95d0b716b25ed5c71b006bc563842e12f1b9b6ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141206 Malicious code in cosmos-eslint-transform-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7479fb17e9a5219733e5a679b2a6f500dc2f60d0358935e1b79955c8c2c8c2b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148586 Malicious code in test-umbriel-postcss-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7653aca1f1686de272649e61e1bde312c3bf99f0ef8ab440834e77b4c521883a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...