MAL-2025-159954 Malicious code in manttu-nuyati-muiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311f726ad817805ac5cbe8657a64fa5802fb981a98d00f980b575bbb5af2f693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167380 Malicious code in teagood-nalikami108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596db44a02407054427c9f94433454b52b4c482e89791cd3544fd9698d09bc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158602 Malicious code in lookingan-namakiki87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ed0e67855e2a4f42cafe9009d28709c10e26176eca131f63e48c63860e7109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155940 Malicious code in ican-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f50f71deaccd35ddad49c4208e922a4e80189956a03b09ccdd0bf2171de274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152644 Malicious code in andriani-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b40f6806402f64d2000ca5201cfff139e49bef77e5ec8ccfd3a66f77a41af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153789 Malicious code in bintang-tea4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b59eba378baca6c9929fde84f0cf7adf24aba824916e507b74c0a6c9246e341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154720 Malicious code in dioalgo-kilp-akiualaubananuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fc835a73f0bf1dce91ba812442be082bbe965e81b3a96e282768df04e59a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159574 Malicious code in manapf-manuta-mantauaap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850f6165575737b8a2d1d3f1a74b6099f737765af02eb0875a585077f4726883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150954 Malicious code in @miptaa02/stupid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 907c8c425aee0e4000f13c6d10b66f0f5b7d20f963278774ef94765e182fff90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150983 Malicious code in @miptaa02/ton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a854e906616d03a47cf52173406175addc9585c888a6b591480685bfbdcdc47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151013 Malicious code in @miptaa02/weaddd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc322c8d24bb785b79bab067052c9eb16025ab2f171ff58c361be32f9017a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162583 Malicious code in nokire-genji9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2729e21cfaad0ad5623cfcb14f4a8305199f4e1d8e4a630c70cf538fa5dd86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169366 Malicious code in tusaaya-0-ra2fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3345520459a34440378a35f2247740baeb5c3a67a3bff47a910c76a17665fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160474 Malicious code in miracle-dibok-inumiu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020f95016fc7b445f84f19e84cbcc36f26f45f6cfaad8373a6fc1eed9d2de9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151966 Malicious code in aibopuna-mobile-arpnabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e005d0808956fe5553ae1935bc6ac5fc2f7a78b9c9e7eb839588d6a8273f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158180 Malicious code in lintang-tea22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b61b21dd0d8533a604392eb4d33875dc30617eaa4525aeed614d02b8a27cdab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152726 Malicious code in arif-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a822a400fab22a687271d5adc854e71bdbe6659b5e9722533a5fb00a1bf250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165402 Malicious code in sabua-muuyau-tdafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474fbe666de989de84ba29e1be6f8c7a85fa0639d62b005b8df13d3fcb265d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155339 Malicious code in goodmanmax9250-leader-circus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d474d3e2631ac710c373dddd243be7a5fc1d730dbe455607acf0f8618fabca4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168986 Malicious code in tehah-mansat-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a396a07025b8a635bca120a0a62ae800846197beac043695b8920a75bdd1061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...