MAL-2025-150753 Malicious code in @miptaa02/iris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9c22ff81e77e698805918dd5f2721f4e72b1161a228174829625792c581eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156876 Malicious code in iqbal-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b571f9f691b63bfb45cf30941356cec81d0637309dd3e671a514a031d84721f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157973 Malicious code in lala-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ad22d6a80bba9273128fe6fc34c36a01ac1ad9eb77d3594136cf46574789a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154622 Malicious code in dian-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf6956c795b81834891b1338b6b0765141d3aa120e42ef86d9f9ae956f407a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170564 Malicious code in wulan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87fd740aa0de337f4c1ad16ca997ce2ea56fad4b137219af070b681e55d211d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151843 Malicious code in aiboa-moilopie-aromoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb9091a8dbdc24a0eb9a7e86b004335e6b0ebfc7bb5bc552a4ab30254e26ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152631 Malicious code in analus-pafai-asuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 524367e17649b5e31d4d7576bcd2e5c6c9e415d3deb54cdcdf5c8c41e898cab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161393 Malicious code in nabuf-otgaf-doigafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ca8a24cd39f0f8d55f02030c55482a0090265a2dea395d76e8bcb7caa1a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165914 Malicious code in shilang-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab43d73831b37a4d79abbab857a7f26d7f2c40c0b5372f4fabf669da46a6de51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156297 Malicious code in ilop-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3405cfe73133705b3d5212b93a4163a888a85a8a17547f24b217e236f64aacba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159064 Malicious code in mahnud-magufu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13ace0bee56046c3e7730bc157fe1a1a42a2e394090f22699cbc752dbda04ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164659 Malicious code in rino-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f4ca521077e593466d3077d517128ab7a6f9bb0b6f131fa2f6cba2dcdc180e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160396 Malicious code in messi-urt-efdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c455cfdf4bfed4d6bb8e674b73b85cebeb37cc6551b147b5d4363ccf036fda1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167610 Malicious code in teagood-nalikoli54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335eb7ee2b9fd3f2f89f6459edc2caf60f82d8491bfa95c23211d7d21329a2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158012 Malicious code in layla-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7c5d43a19763d7be3520bf5fe8b5e6a53130db9ac11e7e3d5163bde93366d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168413 Malicious code in tealove-nameka30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb85cf21750bccc33c4f312c6f18734779903dc4667362c3706efceaec9846b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150470 Malicious code in @mipta19/ytddhjhsus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d9d3a910c3143471ad514a15f5b11f27ce1d0f1c73d112e6ebb9da8434226c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170448 Malicious code in verify-tac-mehncal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f26fc8ff838cae49f97343fd64974703c99e782425aa4481fd80922b7cd5b0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153502 Malicious code in avomainah-fragas-ofafuaffau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548f1600d0bc2c584ecd545d21ac2e8c7710472ac24ca8d97e88aa3dd08edb31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150368 Malicious code in @mipta19/g2enser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd786ff1a3e5ba06c97c5c855d9efe606d3c85500fa6b086d2d3d6a1112bf9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...