MAL-2025-150601 Malicious code in @miptaa02/ewihs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d6621ce6d93761899470a550d9298a277e1d6e2482c70dfc3f2113cec82551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161270 Malicious code in nabila-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e774fc47544d1a2c833eb62ed7c6b4f42ca902f070054f73df4d79853d639f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166633 Malicious code in syahmuda-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716c2745b44e753d874ad0b497816f455a5b1a9df758009388cc989bb8bccbbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150094 Malicious code in @mipta1/kdads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b443d1d105cf78357d595396a15fd60ba52c1f17934cfc302ff1f9e582d984a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157330 Malicious code in kamasada-nussta-buadadanto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a3ffc64032fabca63d80bf346b78181f8c1b9e8435443e2bc1276e94ac36a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156166 Malicious code in ilal-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90524f1a7811b86e041e73395f7d844803f1834e21080f379f9392b2c83a4434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160400 Malicious code in messi-urt-eus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc58dc4c84b3c525e840edc604d6136fa4da1d94ff17732b8655da340e6eabf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165906 Malicious code in shilang-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1876100ab7cf7fa2387e98b7b85f3642ee0387ffa6649e4ebb16706082fcef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163613 Malicious code in nokire-zenitsu26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ab0747b2a32dcdfaa9df88df5d6638aa4e0eb97a2032a1bfb185581e4cff30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162435 Malicious code in nokire-arjuna24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9b4a6e3f86acc20e09e303ff5e11f1bc2a4de58b4607625e38719b0db50208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169924 Malicious code in uinsu-losit-dulu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33decdd6008ef3d80b8d3751819566efa1d5cf474af42d2f8b4d3a4a141f49cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167542 Malicious code in teagood-nalikoli132 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6aa60afaa7ba012640a722583b655698e4a66b8effb11dd8631c788af1f729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163685 Malicious code in nudalea-fofiri-agomoidoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fcb278ad08c02eb47cb7c4acbe63231e71256ba3f4e1767027d8e808c858566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160465 Malicious code in miracle-dibok-ikalabaliku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46745594518b0d6c9e44a6a2ca7ab9f462ff7c522aa52feb58941bdc8c9c8d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160169 Malicious code in masan-ofa-bauila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821c62dc5745438d1d1ff441a9586f1a6ae8a9ef898e5eb2ae5c15c8450d605f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169527 Malicious code in uaragifa-afiat-usutauafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485afbdb8cafd83e03cc23fc06a67b5774f225724d5862854b6f45af8da292ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157293 Malicious code in kamasada-ntai-yolaraaddi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3df800e937eb6af650bffb1057983b17be178234d0cd0985fbc7e0646073ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f86ce03a3fc7fd12f078f650d1b4ad195a9f18ee32400ba6eb47f5beb71c91b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tfla-magahazifidgboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4165fb2ad9916b52af4a9ac6f3761122fb4a6072427b813f66c0877027f3a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotamaa-aaana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b1377e81c99cd9e22840be497d5f09d19a5693e4708942d3083084b7586d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...