MAL-2025-157241 Malicious code in kamasada-buyada-butan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bca2af25fb1f1f4076d2a677b0c8f11a6e00702e8a81b863d19956a4785b3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150406 Malicious code in @mipta19/pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c602df2421072a8170e16cf0394c02bdcccf1ce2c4e89683b24fe28f51aa02fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149956 Malicious code in @mipta1/asfafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9141d94fc66d6f0a83a6f8550f634821c20440597a5a12e147ffc9da25e81a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164586 Malicious code in putri-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17190d07a37bae36fadd3ce0a2ded6d375f2e1098b4c92109ee12e81215e01ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164695 Malicious code in rino-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51e6a397b2be34bd7b7b08191c247b79d1894356af19c32844c530edaa1bedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158915 Malicious code in lookingan-namalaka98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6759c9b0fe0f37d3e11f2585077e760426097fa440e17708d3a3e44bfcbc3868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152251 Malicious code in alfiansyah-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276a502aa7e46f66a0408ad56bbc819b0ed2bd2f9d2df48930711fef37b92086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160101 Malicious code in manurung-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac17745240eef38d056f4112bd466184facea9f21149ed33012ccb3e16eaf20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151098 Malicious code in abang-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a3ba2a926350281bcfac9015ae95f6d67c9788f16ba49a0b6fd8e413bf6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166746 Malicious code in teaa-reborn49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd41b37d3ccef7bdc50930ce2567bf189faa8405c0e61e6850a132435e10781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154386 Malicious code in diago-kamoi-liumaom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d13ff2874c3d91cb12cb9c48f533e978aa2e9bfec42fa287f9badd115378c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169304 Malicious code in trevora-eissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bce181b48dedf4c56b06823f9672e63a3e99f8e0323588c4e665b178dfb5ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156378 Malicious code in inal-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55603d208d1782d891733bf6655476f163daed8f1d880f89616fb5c022910139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165931 Malicious code in siregar-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392a666dd54efa39f6b9785e729ba8f9eec24f08c5b91ed647c259a184e7f9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161922 Malicious code in nasrul-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60266d064e6ef36e0cd467306754f6cfdfa9e856d7b292fdee2c30f6202723aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153953 Malicious code in bufpani-muisyau-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36798237e88cb9e18986de6280c3ee68ce1ccb8f2abe8ee0576ba86b3250e93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163896 Malicious code in nustar-miuyu-muicac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422a8c2048c34d9433e4bd81672c1b01fdb1b11671eb0d47223e2bf53b0dc962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154670 Malicious code in dioago-kamkoi-aliuima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09729cf277a81c9f6e44ce3b6d169bdb94bb07dd3a8990f2a45981b095f2b6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159836 Malicious code in mansila-tiala-mhlni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7de7946f174e48d53580a5ddb015fc038cc4bd8866ceaf6039ed6f87ef8f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156684 Malicious code in inufgi-gotmaa-anamufozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b755a928ebb671e401e76588a9c9188030f4a0dcba9975ca21e2739b8e99705a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...