MAL-2025-150088 Malicious code in @mipta1/kalasid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3185b2a0b6b1c1b675306f7631cf00991d75296908d2ccf488aef1a711d218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156493 Malicious code in infi-gafob-jagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a9534999b7364fbd9dab4adf0b9981750e54e22da897ab9e7e4ffd4b7dafe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160536 Malicious code in miracle-doki-unisakoiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5fce1e544968ab3f240be582f5ad7432d98f329606f1802c953917009b4434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164567 Malicious code in putri-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6408d99d51dbfdeac8ad9cb35c8684d154c605bcfbd340a515fae09a04d6a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156295 Malicious code in ilop-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 813824f2f13b0d1a249be1b160041629616a8d328615b82bdbbdc94ccaf5b1b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168442 Malicious code in tealove-nanami14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c706a8ea1c6ce2934d268a1949068c7bf07182bd3c0fd3427e17eb2f4168339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152657 Malicious code in andriani-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5cbf85bd3f4932dd662d3121f1406579007eba745709731fc1b93034a5766d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156633 Malicious code in inufgi-gobali-januli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b610fb9270abfa33a6d006b8e937b501f6dcd06789da7f7b54c7d9b54d027bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165039 Malicious code in rival-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc971af2981f2ac5588a21d8b50fcb060928efaf1af0f04cbc285784d54d6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153426 Malicious code in avminh-afinagoofssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9faaac946091f5cf10be380f3dc0d47b7041ae42da4938e97f25f0b64d67460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152331 Malicious code in alita-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef4135a8c79e9fa8c20276660c137403ffcadfae4678d4ef5e7e584d9a37b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167340 Malicious code in teagood-nakamala72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dae11ad1f9251d8c66eae13c420f6f23bdd9510da5bea53ee60b1811bbd232a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169388 Malicious code in tusaaya-s12as-ra2fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a1c7ac5160c081ef65179cec81893fb9737cfb4927ca769c9e1d2c202d5512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153591 Malicious code in avomainah-fridaatft-fafuada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de2db4512a685ee281862c772ff06e998bcb640048477e833ba72625873d9227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manasips-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0f9a2415bfc7d92175135032dd281eb869c0d688188473858905cd13379335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tijx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c846eb1a6cd42695a312dce898cf1cf1c215f9796ad5fceac54511592cdc6c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-manta-nurtasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304ca8e1df37a438f177600cdb79ad827757e13146019fbf3ebbdc5dcdf93fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-sa9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a44fc865febe301b0e0725554bbe5978e5ece62968c57d6f91cc5ddd7254a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-failed-molecular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b78edd477088580809697ce8666f8940d8b9efafdb541a14b6e9ebe08e9ae53e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-afinagofofssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b18e606a7d5dccc85294c993f9698ac95b03d8148321f957935ee35830ac2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...