MAL-2025-164283 Malicious code in pitra-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb891e20d9f633feca0424e4d2d0e404e593c965e9c78d7c81894423e591f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153148 Malicious code in avminah-fagis-figanayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4296757242288732b9b904d2e0ab8ca1cb6208b3164548cca1235cbce8b85838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154853 Malicious code in fadila-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c0a1cf0b0cb6c7dba6fe7d1a99ba583d9a607efe2040e126b0c90edbc6ca5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155680 Malicious code in hariyono-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41ecec4666cad4a8322e0ff89050730e33b18cdaf02f3ea052201833cbc47569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156163 Malicious code in ilal-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a044b986abb447c5088d6da7b175b7a9c6a1895be8bbb057d7c8ccae0f3940e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153073 Malicious code in avminah-fagiaas-fimokafiganguogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edee5d2b1d56a43c084713c630bf39673822c7d76ad0dd44cb3bacd24c67e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166680 Malicious code in tadashi-tssu-renew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6818a8a99356bd1c1cf31a80787547b40ec89346fb2f08ccc41c38eb28f61294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152510 Malicious code in alvira-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6455278cdff6eff9cf0a8f0eb772762bf64bc988c3f28fc084aa1e251e40a035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161481 Malicious code in nabuf-otimon-g0gn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde3db965c45c00fe23e3d8218b8dd346db5e59fd74f04ad0d34d012805c9a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166931 Malicious code in teagood-lokika64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ac5cdd6b32b006ed3cfd3f207a8efc77d5022e6aa9e0ae571cc92d14c28861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166580 Malicious code in syahlan-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcff5c39fdfc621e27cce56dedc299b2674d02d7083c8343db74624eb4058a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150231 Malicious code in @mipta1/sdsffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c3762fca0ca7d9c5ccbd4837efe88b6b6cbbb75f1555b0ab4e76428a320927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164884 Malicious code in rita-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585c7576f54ab059834241b928724783c801429fff140a605391577e105f92fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150754 Malicious code in @miptaa02/irisy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c20b92127f30d3e1db3b2c2a6cd4a4b3f5c541fe38b379535f1f57eb5613f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164898 Malicious code in rita-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad2ec8b879033f7dc6a6341b21071ec9cb1de76a6de84fc69f85061606f2d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156141 Malicious code in ilal-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928d78571e97b89a2fd2c6ac2853f6e735f88d62aa60a02fc7a5c5afa019b8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150282 Malicious code in @mipta1/tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a172f9f51bfe5cc90dfb56ccf221f5f51f1637c30ed6d383fcfaa31d1696135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164937 Malicious code in rita-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd9385283beb224ca5c2ac308def000c74bb3ce230be7588812f5c2b91e9d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160132 Malicious code in manusia-tavil-maasdfdudfdfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f8d147d6518403f3cd0a6c1d4ef5103cfc892d6edc5c345744d9be8ce345d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154582 Malicious code in dian-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4bd5cc5f5913f967cbff8e4a4818655436e8b80a8f9770701fb9ce3fd062770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...