MAL-2025-165437 Malicious code in sabua-muyag-dafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d3dadc737c7d47b2994593740ca17f25cd868578ad05988746a3611d091f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157070 Malicious code in jimmy-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9691eafe728d2f80144c8c62e937d19c7b5137e74fc88753cea8ce7aa096f6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165871 Malicious code in shilang-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a46ed9c6490ef5be6d4760113f17197dae295e2907f4487c6dd4eff5753094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160545 Malicious code in miracle-dokloi-ikaluoaaisak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6a6bc2c9ca9e1d16100cc0324859133f60719593d33fb66be32f264a5d8f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164583 Malicious code in putri-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4afce4963488ca6581f57f7f6cb003e5740b7b0a26c2a1ea9fb36c6e016b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165131 Malicious code in riyanto-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b62189aae1c054efbe58357e44570e281ee0acff1f16b1aa9aec72c7e66046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153631 Malicious code in azhar-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa099d8687cc1b0e1d0abfabe6925e74cb6c11fa01fa083413d3572df859f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169868 Malicious code in uinsu-losiat-dik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607ca40db9617286de4a68e351a23476a220b1a8e9bcd8dbae69e454b045cfa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157443 Malicious code in kapai-safoamaa-agda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58a244b78922e48428d880c2e1bac3637ff92ae78e7bf30339096b8afd44ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150118 Malicious code in @mipta1/mds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8865cf4804a195797b48e5ff6bd8f4831d028de3e4847a96270f51dce87a77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166096 Malicious code in slamet-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff366500b348402e835dd5e8b6010271244b2b5d8a7f5ab1980bf1fa0a142abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160855 Malicious code in mundya-misptasa-riad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c884a939adf86ee837e37bc07ab3ef9d4b159b275d0a44ad96899860fdbacd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156246 Malicious code in ilang-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ee934a65dedc4c564c9371129ef111c64ce793a682bde0dddb0cb0a104fa2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153847 Malicious code in bitha-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c996e9f977a1962f7b0a71ff22f70776991538baffe2cc686d385db2180dfee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165258 Malicious code in ruji-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd446a0a7e389993db530dcbfe49c558fc7206c9f56debe536619733bd7772b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151247 Malicious code in abiba-alvbai-ayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8cfe027f205b758d3dc91356e78cf915de68135452f8b1b4cb4bc5aa43af21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152142 Malicious code in akabia-aligma-agaiubva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0093e8410269de4f10cc0d8cc9d9b5e39e2aadeb4bbd5c495aa3c32397fe389f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153766 Malicious code in bintang-tea19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8840d6e409a6024d7c715aecda69849daeef0eddd9fc69710bfcdd74f821e590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154890 Malicious code in fadila-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc46a6add0f5d8bbecd4e3d2cb455d0fbdbb9dfef39224019da7dfe1f9ac26fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150876 Malicious code in @miptaa02/nyaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d9d3b5ae2e0b4217e9adf4e59a8268e5d25bf0a48f7288f4bf0d1a09750566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...