MAL-2025-150289 Malicious code in @mipta1/tupalsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9acd4f55188bae00f8dbe8b6998fabf99a223789848a5d8d1244501a470ceceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165181 Malicious code in riyanto-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bb35e04718541b0b53ae83cff506371c8f8f147666740967b6b1f3166715e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169748 Malicious code in uinsnu-lotaizmi-kunubankasilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d534c32faf9597feb22247d1385509f588f5c164369a2edebf86fba3e3124994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153227 Malicious code in avminah-fagnias-ifiafgaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a62522c95880abe55de5a4020b065edb806b3ab8164a40cd181f0ae99efb344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155753 Malicious code in hariyono-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c21c2dc80958f23bf417cc286476a33bd4eab98b519bfec372bd7a8db41b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167536 Malicious code in teagood-nalikoli127 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6587a779328c81f4e30651b91bd44ad0c23060379496e3e18c3986ace1880d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154779 Malicious code in ewa-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1649540998390e9eef7f2270c632437c1953e00b0bbd91c122090fe7ee26e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155412 Malicious code in guras-nitroa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9038c1b554fc06d6a52eb1d104cc813558c3a7fe78a3df894f61226256de64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169855 Malicious code in uinsu-lista-atumun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 092883970844e0b57609c7f873ffe3bb80ee81bcdcf1c53d9df587d9f56457a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160410 Malicious code in miftaiky-long-condition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023daa735cc13780cb27de27508c9a71bd3f899fb75b670c36c5c49f5a0806cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164644 Malicious code in rino-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cb18174ea12002368cbdad28786eed77ae2fd1e4af757024490171e70c803d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156197 Malicious code in ilal-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5a9d18134222621b77369894eae87bcdbd90ddaae57880b6ae07d030c0c97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167128 Malicious code in teagood-manaki60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2732b8d8e43e75ce4c341e8b99165b948969a570e1e3f650d00afc247f29b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151450 Malicious code in abiua-mobani-atayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c69b246d0633aa691a03acb6313ce3d19220d5df3f61ae05efb5004bc9f4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157545 Malicious code in kentung-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af40890f1f37237f0fe91d54f6dd7cde7a9a52130fce765c71831023b555393c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159388 Malicious code in manadsi-safifda-mundarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0adf4754678fe828a3f97f2289d9c5788b3e9c3e4ad6912b2e66a8368b3053a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151756 Malicious code in aciyua-idusut-daar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7474beec2669aab46cdf774586dec9faef89600fe16216a2fa56bd66d8470527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168122 Malicious code in tealove-boy17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1953f026f62b1555c32d395a28bef9d55cb678826a69ac9a34cbe228a8b33b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166085 Malicious code in slamet-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badfe0b059f23e909bea88ad010e71a4314c8e9eee02c3cdb9ffdefd638c4fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158471 Malicious code in lookingan-nalako6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7786298a5ea56f2aaa1f6b3230af008f26c8dfa0a75f10895831d171ee8155ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...