MAL-2025-150313 Malicious code in @mipta1/yaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09866bdfa45e78a9c24137e4f1b5e6b9f19886621df8e960d735881b5d79fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169966 Malicious code in uinsu-lot-bisabmyuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a4b5028ff6ecea92d97e4644e6ccda493a97ac1e4b782b6cbd4ad4c403b21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152397 Malicious code in alita-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1a69344b680a0a8811b40ba4681350c7212cc3c4156f0f4e73cd33ff230d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157636 Malicious code in keyla-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3771cb5fbf4d0074ab762fb545d159bdfd024e3eff2d41386694be1112f5a031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157336 Malicious code in kamasada-nusta-buaiibdan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceff683e490886b58dc72ebe6cfa7d1cf3ca091116e10e2e733945802ccc4e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160469 Malicious code in miracle-dibok-ikaliku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f6affa7cc294a242bfe67fcbac8f2d2eb9948a60bc480f0538d692bf0137f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153010 Malicious code in aviah-afbiafaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cca23544d93f1552e2e6834b0fbf88003f9c0f4794edbe3fd0c595e6ffd041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157079 Malicious code in jimmy-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b6731ad2298c3890eef9a64e9695aeaf840517c45ebfb279d44820293552ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152997 Malicious code in astia-aloafadi12pafeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da0dbf04303a04926fdc455dc40b5d32e36a390f245605c30ce64ec3f8db938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158191 Malicious code in lintang-tea32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6861d767447a80f0f484c775f8fd8e6193b3bdbc0a8b0c70ac901b52f0c927f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165574 Malicious code in sabuvli-nalaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5273225d5a33e7cbde64799f2d667231b725a0df4806322a9ffa326928e0e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156704 Malicious code in inufgi-gotumafa-anfoaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7388aca7a3d775a4e7974463823ba12999f591dee857b5899619d03377aedc5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160519 Malicious code in miracle-dok-ujai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3571682adc11a6fa1a8304bfac44fa876901bf2c459e82485f8bfc4c9a8930f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165562 Malicious code in sabuvauakli-nalabui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bfee167fc92c467e16beee7380f6e3c542017d4fdae7502ed80c99cc61b74f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154406 Malicious code in diago-kamuli-lukaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cd865d392cf589221a6e81828c9d5c712dd1ea9191f7a5b61ca7e6dbd4ee29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168382 Malicious code in tealove-naiman43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c563908c1a7ac47b40569e509071a84f9c176712a3ec7ce140b3658ef2aefd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170540 Malicious code in wulan-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36223b39d25cec97e0bf944a0b382a46b81367b7ed1b89c8eb9bcfd43330107c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156657 Malicious code in inufgi-gotamaiva-jaanana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71a67a59f359369a5a08d649db92f435ea987833869cbd6c3fc851d5dab229d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150724 Malicious code in @miptaa02/idkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c81b159af4b331d9163ba0da21df411bf2c63f73282bace1c47429121bcb997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155334 Malicious code in goodmanmax9250-fallen-south (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14b89054aa225687b3bf1a6ac6d8c5a793ee25abb79aaeae29e41c30f25065d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...