MAL-2025-150529 Malicious code in @miptaa02/ashae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de19c0ffde793f6080a896c921ef99c4496996ae450f774d855ba7540b18e32b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156157 Malicious code in ilal-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db3c33bdf8ae761d024627186ab7c978fcee87d7cc97b367e2ec1921699ad53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161749 Malicious code in namada-kasito-nutro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469707a92f7f1415f2443981bbca6e84654c69b89ffd5a5ca48f53879bf235e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165546 Malicious code in sabuli-nali-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ac507ade7b8851e375af387f7e6dfa8270063e4f0c540096cd48e964d920559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168518 Malicious code in tealove-nice39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f72b963061719c7a615472672dd7876e8a860b0c165c2bf357ade681eaa1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165336 Malicious code in sabua-muhay-nyaiauanfamatua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e116b035ecd42a6c7e787422238715d264098fb156d9714f255cc7b73095c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159226 Malicious code in makan-aiuga-uyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f5010e42c1a545a16f7b41a33d69d485ee8d831f9db1589c98fa1bd1274045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167887 Malicious code in teagood-yakuna3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dee2b4221d483ed43396ce3da31e162de568262cc1ab95392705ce8dec825b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155622 Malicious code in hafiz-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867b159884945503eff4afe53c9b961de1a83eab3d0c55a449ff10535902433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167326 Malicious code in teagood-nakamala6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d318739e7342af6f86a9e003b29cfa80eb35f14097b7c8356f8b888efcdf5d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157619 Malicious code in keyla-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16674821d954890d5fd5f661d33bcb8d4f7068b7588e9ae70ac02f2f07bbbf78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155208 Malicious code in fitrok-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1be60373352517339b6e271b426278e12be48d26849792f2320e658acc84fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168356 Malicious code in tealove-lady48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82272626002e9bbb9b12f46958a468e9f1a2790a697120c444cd42a45b5e1658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153773 Malicious code in bintang-tea25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8230e0ed2c2f172b34c34c542b11d586750828d8a59e71887e5d7432656857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152793 Malicious code in arif-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c674bffc00f9f46f0948be76e6733471c0d5e2a364565626dedd840d2bc0670c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160863 Malicious code in munidr-nerf-nasuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1121d09d23f5cd586f7c6da4ee6efe24e77c4ad564803031af57c279e86cbd23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153939 Malicious code in bufpani-mau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bf26377b96e31fbdd8e6d7a25cbe3486e7e3ca9861797fb64fff8d26366a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152948 Malicious code in astia-alabki-malosskiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4750cfe57aaa802b08312feb5f295cf4234c2a010653ba6d0d2dde2fc0912f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161655 Malicious code in nabuf-otomabin-nojaugsggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad7a256de090db25e6b081d3cd8a573a5102751c825ce0e5cf6dfe56cc1709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163750 Malicious code in nudela-ff-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29278d084534d03014b10719c2980bace598fd51b4dcf4c34c5ad58ac162481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...