MAL-2025-156317 Malicious code in inagi-gvma-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36b472e28989da81eea3d2effebd68c173b11a091a55e0be592dfcb9d34c8a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168451 Malicious code in tealove-nanami22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd12e735ed5cefb55d27e68ab006ee94d42051676d81010704e3b98bd91d5da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155949 Malicious code in ican-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f78462f73d82d3e7d714d5c99f8cd464f3130b8869b62b9870b8194b240d315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165707 Malicious code in samehada-daazs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b253f9a928348aa31100237ed838faa418ebd7e7ab9b2b55ee0b3cf80484a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154399 Malicious code in diago-kamuli-luabaoiquak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61406d3e17c429658b1628be6fbf4bfd61a77a3d857277d6ea3206684ba212b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150074 Malicious code in @mipta1/iynug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bcb4b114eecea22402941841fc841a50d42500a6ef24fdf45fbb830513ab61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153110 Malicious code in avminah-fagias-fimokaigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b7350e9e57889b4267739afee52dd037a9fdfec9bfc3973fe69eaf8494f90b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151975 Malicious code in aibopuna-mobiuple-amaidkhora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd30714fa8f79701eecc7996c2f737601aff19038615d7736d7d74fe5a0946b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153496 Malicious code in avomainah-fragagis-ogunafoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccea10d4a4903028dae0941c6e968c8fb54e6a18cf40ad2aa5284116cbe60d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150240 Malicious code in @mipta1/sfdasr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4794f644c62bc1835ac68e02adec6d33ac9871f96a4e15432957379ea3761c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160234 Malicious code in mattu-mitboip-buaotada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33906b7cecf3a449bfa64a671756c15ca35e1d488c1c48b91e529f1ef0583178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153775 Malicious code in bintang-tea27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00dc749976f3bfc7c44c0a2256cd65bd8f8cbcd07832cc996fa9839ed2a969dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162021 Malicious code in nasution-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd149afbb41e5c76aa5ebebb23bcdc6f9976c52dedb9b03b44d4513f4842c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165257 Malicious code in ruji-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1a08cf40449d303425087fd2828ec66e60a59f2c98ae9328841b7e11be2200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152214 Malicious code in alfiansyah-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8498479030399b1e56c3e6a55d54a4047e401ff49cc6fa8f0f9724889c689e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164889 Malicious code in rita-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86f2f4200e53df852f355f2b775fbc9f90dad6a2eb45551f5aea67f5a421804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153809 Malicious code in bitha-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19460ce825c0e4dfb881bdccd7ba61aa89f9d1921f3b9bef2bed38bdea7749b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155766 Malicious code in hariyono-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650ae41fafcbdbab23d114edef996ab26bc444ff801c0d5c6672238a2b575d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161079 Malicious code in mutaus-manasips-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0f9a2415bfc7d92175135032dd281eb869c0d688188473858905cd13379335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152732 Malicious code in arif-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8679dc26d05f3219fee03d011f4fcc05561a6b7adfee8c0f2731ecdceef5c18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...