MAL-2025-150843 Malicious code in @miptaa02/mjhkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151e9b1d24a0c5806dfa4b3c406f7d61724866a0e7dcf17b1fa2aaaf59039de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153822 Malicious code in bitha-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca425bd1ac381cf0a90266c349a6479a55f858e70294f2ce932c41da4e635a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159100 Malicious code in mahnud-nofty-mua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17faa2f23a298672f09a98e08a2d846d01a396f2b44ad3d242740845cc45777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168571 Malicious code in tealove-nokire42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172c6e9f43e9e959e72b528013ab464bfa311e14f70a0a154a318582e8420c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155353 Malicious code in griez-nutr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4228e142582fac35900f7baa5c0e20f88451566b0d2f49ffed7b124d826c762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159482 Malicious code in manadsi-sord-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b327d2d563af453472d134e74ef3d0b2d1a13864df3d89388a0fa8b93cfc9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152117 Malicious code in aji-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a478d57b6f473e87d8d2ad67bd6097b7eb9e39acc140d66a2db316ed4b80a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152993 Malicious code in astia-aloa-mafkol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38933ca48844451ee70e669e04e82270e101813146a782aee0be1f393b0e346c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169268 Malicious code in trevora-cir70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ef2bd9e18d9a8b3903f46dfff35d9cc3cdeb6e6d1a4a011dde1d89fe4c34ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170221 Malicious code in uyaudtu-tyt-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a01a37d3b6098de2b62d785672f86d51548a86fa2e94981fa4b6b1a06c745c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164415 Malicious code in polymedr-mind-buipenajaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6573e02509a1810a52c68d0420cfce805cc2b28b248f8614b1233170efebb58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149927 Malicious code in @mipta1/ap16403639ih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1cacfdec0b8c3ae7cba9198c07868f081f1191137c81ac42f90538e6e02f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151706 Malicious code in aciaig-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa39fdc4443998decf2b175d104a20f04fd9c30389141200d9feb4f540f99cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164748 Malicious code in rino-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57c868d14eabc4accf33b73e888c688812decb30c747ae81788ac6812cf868ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163412 Malicious code in nokire-sekiya24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67046e096ba23b6935ae4df9ca0c2a9a0eb01f20286ce2ee5f6147087590cef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157124 Malicious code in juris-qeusaspss-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a4400818acd4825f2a98c2ee4dfd9bc88a87d7077b6c38adb84515fb062fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151517 Malicious code in abu-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c134254f2563763da6837da5b1f5ce9873238f6865eca3fabcefa9f186696107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150313 Malicious code in @mipta1/yaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09866bdfa45e78a9c24137e4f1b5e6b9f19886621df8e960d735881b5d79fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167934 Malicious code in teagood-yakuna72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03a40a47098c8ffdd398ed861c5cefb60c37a55bba9d8bc8fc9cb0772942ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165652 Malicious code in saku-aiu-unianusiakpmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4367517dce045cd2bc001c1c8af37c1b3c9ff2d73108541fad7cf2da15e6fe63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...