MAL-2025-150322 Malicious code in @mipta1/ytua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07768d3e780ee4d09afe2f917e486db4fb59f69748d949e65b7ecbc5b39a61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152679 Malicious code in angin-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c5fbdd4ad6f1f2af75b349c8c19d24491cfc71c3bd5f1b4edf0dd1ea93e1f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166680 Malicious code in tadashi-tssu-renew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6818a8a99356bd1c1cf31a80787547b40ec89346fb2f08ccc41c38eb28f61294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161879 Malicious code in nasrul-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f2336f5cbfd6cd14c93083e952c605b5c8a9824346b4bec892061dea140663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162370 Malicious code in nokire-arhani56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198457910975dc9eeb15607391d8960049d66cb97703c409e73618766a10c570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153643 Malicious code in azhar-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8ba0175a5defb8485f4f0ad83e718b0c1e15fc6ec44f162720cf778eb2eded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169563 Malicious code in uaragifa-maranfu-safar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928c767fb089b7752f392c35f9c0f7cbb7cfde5fec224acad074ed76390d2b18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150447 Malicious code in @mipta19/slav1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6518259c60500edb6065000588f2338f9b12e87e9305aa196c75db8e94e0d783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154796 Malicious code in ewa-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168b744e98b5bc12987f23bf1614a4aae54587c4201f57247df782b8af5036cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156637 Malicious code in inufgi-gobgilai-januqgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58925174bb18f4192ee7e2fb3f1b8c76b556af12a078214b98ba909a753832eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154944 Malicious code in fadila-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe1b225a7787b743de790d4338d4404f3cdf6efb1f845050a88fb42fa1fb1cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163821 Malicious code in nudela-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0f5136a49dbbbbebd8df3e0057e7ba94cc1ffd95e64c583e1d9d2d337cc6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162110 Malicious code in nokirane-asaigga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e195bc55b90781509a52c7042bfc0ccf8fb85ed428700b562569842f0df86d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167227 Malicious code in teagood-nakama60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7315fc4aa4196f58802e309c532800df298038b143b6142653b07d89d059a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170442 Malicious code in verify-tac-malasikiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042ff9f899b668756e2f3ecde17cc15b153a50e1f85f622bfe287483d315f9c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160411 Malicious code in miftaiky-parallel-gun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314e46caf5d37c19d67a6a4c1a30cae6f8b75e9d429e9f41af6239c4aeae9e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155951 Malicious code in ican-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a1e7c831ae6dca400710fd4792ba89aadbaf0dab99dc9fb69e8a8aab05dac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159691 Malicious code in mans-manapa-nyur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b45c1854988308ccfd3b2d04a5744b9cb8af0d56e68cf5230d4106762b84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162311 Malicious code in nokire-akaza93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab173bdce3eeeae19d3fe3756af48567425b97f924cf07068bf01809439db968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162436 Malicious code in nokire-arjuna25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcb84a451f990171fb383523baf7f7c195fc6d25b1ace9a64d97f68d88364ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...