MAL-2025-150097 Malicious code in @mipta1/koad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4ea1e5c258bb58ec8ba4741c9a2292d912fad98b7327953bdd433248f964a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158445 Malicious code in lookingan-nalako36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9d0fd936da8e3436bf8f4b327458a2eb20fd53b9fa8252da2e57f7dbd38647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166772 Malicious code in teagood-cuekin100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c11f9513c9160d0128447fc6ea97c9f4694fd702b682745b2bcb1311ea9754e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158155 Malicious code in lina-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e63179ce664864e45c4a25918194465cab6db431cee8fe310851902911cd21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154798 Malicious code in ewa-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1703e7d2a5dcb7b50925220648e569ef3c724007284dd2eff9b6eee742ac93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154766 Malicious code in ertacssau-tery-rassismu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0cc828901aec04484a5952a408f55f73e305e8128af2f3bb45d8f32adecdf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157680 Malicious code in kuinsnu-lki-kagbdsadgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac93ff93151bdf798ec1d07eeb17b3ab62eba73aede74fac75f39176f7651f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158689 Malicious code in lookingan-namakita75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e0d06893df803fa3139a5642b2b1eed340a596c7c684f512504f5fe3f48c3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163126 Malicious code in nokire-namiresan70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94af342775c479fcd8c86cfdbf5fd8a6b1d6a284e0655c4da5f3ce2ad533379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165534 Malicious code in sabudaapa-muyua-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca79928071bb5e14417b0bb9b0ac1842886f94b87293d48b6cc8d801529e5a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156163 Malicious code in ilal-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a044b986abb447c5088d6da7b175b7a9c6a1895be8bbb057d7c8ccae0f3940e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152523 Malicious code in alvira-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91bd6a8aeca7ccff70360c12558909dfbd3a09fe43d4ef5e2310075db8b38f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160822 Malicious code in muklis-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bef34922534e47f33a6ce47d589012ff44d96e14e04b493233c59636e7620bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159295 Malicious code in manadasi-scidor-nasuofp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf3356ac0027266a697eec418439e34db3f9dff693c8466581ebe1b9fc679f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154237 Malicious code in dajouka-tsfdaa-t6a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86af3bcec1d9300a8670d021916c495b8f67b4a986a2b91e325b0673fc449d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154548 Malicious code in dian-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93ec593855118e68c1446b8f88ae36d5ed05a624e7212721786d6c0f120fcec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gasd-as9as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf00ddd92bf410f41db4c0e66e72665f805f1ffdd93dd6b8b5909a8bbbf3c58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/flagie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3756c9f3d41c0d791c8d382935a1ba08275c227146aebac6bd29a73b71eab2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tayic-alusakilibamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47115b8c2c694bf752797bea9e128e253efb06574dd88cacf143ceb60b67b99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a8a9bb4c25928a500b41effcb8340c29a0ccd151c11bbb73e2e92817cc75d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...