MAL-2025-150530 Malicious code in @miptaa02/ashdse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9358aea7e7aaf7f206c8938f07b12d8e81b6458d7c198499dff1220350c6a252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167218 Malicious code in teagood-nakama52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af0205056320768f14f54ac6d64f532ed253e1f7dca0e72d2051d2dcabcef0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169483 Malicious code in uaragia-mudai-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756402639ddaa5f0eb2fe282c6ca865575926ed9b2d8ebae64c9e48778b78f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165516 Malicious code in sabudaaopa-muyafafig-bafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0db8351251fd159b921adad86d67bdca7e09c16be93e2567d7b276d651a40ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164201 Malicious code in pilka-luniu-kanuaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01c24e8bf05af404ee5b8617f9fff997d51745bf645ec383a1754b01f0cde6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151221 Malicious code in abia-avugi-aninah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37fa49017fedf8e29db9614ca86e02486940b169fee931e68d1463b42cef4920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155630 Malicious code in hafiz-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3de0c0c7d6d42d1a1e8f128a27ce48a080df49bbd0352e751fcbb881e99c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161456 Malicious code in nabuf-otimmn-afoqaofga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7e00b66bd8465c6f636ac3c635c04def531046c0640adaeb2031691d4772dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157049 Malicious code in jelek-rasis-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf580b0d87536a4236be19db2b41e3e978c45a912e42be45ec97eb8cee703944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165866 Malicious code in shilang-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db14c9c684d22cb9405c593f151764950acb0f10a9be3d42fdcc2d53444f415d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165785 Malicious code in sau-naki-upside (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3876731e07c5c3df6ccfe1e479202ac3498085bb76c8d856de42ca80c118e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152715 Malicious code in arif-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ee57746a3c389371f9ca2364f6fcf5cf7cc24daea3600689e4683a5e90e078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150738 Malicious code in @miptaa02/imb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 119108ab6a63eabd17dc81dd058b69fcb3aa67fecad84207c8eaa1517e3b3de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166700 Malicious code in tea-osss-tean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a9fb9f79dc13935b529b7735a778f415cef0b719f878c09a1a65717d78c9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151223 Malicious code in abia-avungi-agni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a9c99096c1bae65c508bcc7496bc8d168abf70c3727d64b608fbe67c993694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161929 Malicious code in nasrul-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbb87c80c914068bd0de5ca5264d7a74e9e32c41be1e95a6c3879535d25c6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156880 Malicious code in iqbal-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3440ee3e20bd8559e3ae7a075c91a9c66320889e8ad0640a16bdf9d86de592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159083 Malicious code in mahnud-nofity-gaoni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57da65aefd9d98d16716355ed415f9b55936f1706f5a483e41a4f45856ca3b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170408 Malicious code in verify-ayicaku-amuinaabhua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10be38c99549595a904b5cda64bf4c733d281719170029f8b6f282b2e5d3a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165134 Malicious code in riyanto-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ea21d5807772393429156a3d7b85d6635b9ef7dde092beb5ecd18dded1b99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...