MAL-2025-153713 Malicious code in billa-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4aa333887d4cd92a9fdedc7a55c55d88100dbeda33272f3e9acb81ac06366a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150205 Malicious code in @mipta1/sardf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01aa05fe7f08ec7caa7fb68b35895e1386c28c75445017429ebeb3d028bfe965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153013 Malicious code in aviah-afgaagfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22aa5b34afbf01d5daa92f06e858d3c2fb5051ee2414125dea873d5cacebbf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159535 Malicious code in manaf-marzuksi-maja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42d22f4562f9f2d5f2e61e23ce0028b57021956e634ae6649cbbe965e2740b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151896 Malicious code in aiboa-molpe-asimussu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a38db1f139ed7f8f741dd17b24317beaf9073e4225c2dc28f2b3b4ae7fefbc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153103 Malicious code in avminah-fagias-fimokafigguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4203ae91b841bc8dee99dedbc48afc3a5055419cad34ef10b0406f5578c1e224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162088 Malicious code in nokiragne-asaifafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc47406ec7e9a46c72c298cee3aa8b59ef5347574507a04d6f1ae4544ba71bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151644 Malicious code in abyia-nika-luy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1181131561c18b767eec88ee603a51123ee96f777ee23be4e84154920a1dbec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161890 Malicious code in nasrul-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f2923d0a60833ec4eaa4704329d3bef8676e8f2b18847f3fd287f10d5950e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158011 Malicious code in layla-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d516434544eebe424b3aa2b2a16c04ac6cede44c80dba53efb33a8cc0bccbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160911 Malicious code in munir-nautyt-minahasari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef63ed93c164583cdb70fc2e5514cd5fdeb590c77f957b2f87ffb1ff122d95c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149928 Malicious code in @mipta1/apasih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424034da350dc25ae3479c54087b608ca9f2a70c44909223de3547c56a733009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170460 Malicious code in verify-tactiva-me (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4c3fcc9b033d8f61a8314ab4f9fe3d72f70335aaaf168b93c68620b5f95fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160581 Malicious code in modira-fuhopia-janis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2043eee3eea2c1261501789aff17fbf6dbb4a04251535c757067f189bba49f88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163683 Malicious code in nudalea-fofiri-agomoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d11201d37b492231c8e4b5d480037386d0274395951ffff4e5e05951e71cf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150909 Malicious code in @miptaa02/rediko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1b676d3c35413e5243593587481a861124709cf3fdef01c5bd7a43d1f1a750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170518 Malicious code in verify-ticaul-bisusayaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510c47dfba0a56ed21a75451a734cc8e689341285e605b9037e84697606dc814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154790 Malicious code in ewa-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2a301fcec12c2bfd5a73d73fc13d3d4737e3bd242dd9320e629107dae5fc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162828 Malicious code in nokire-lokcek70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0821f980b488917bffc52d7be4a9902a24fa7a361ef1734299d46aac733f4131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150951 Malicious code in @miptaa02/ssai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef1ae87780ebe68cf9cc92ebed79ddb4ea7f240d968f6dd6a6fddcaf1e889a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...