MAL-2025-149929 Malicious code in @mipta1/apasihas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e16b890d767d336180cb9f6d5e182e2945a9838649f58cf763eaa0baff16905b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160565 Malicious code in mirai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c534b9f9fcd038cd21e2a77eecb8fc104f8ab26fd0df8cbffa2232bd4be7cdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uyilu-vilnakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28eca07d79637b46d57263bbaa16b67af25d0e2c1320807aaa0d7ffd1abd728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154478 Malicious code in diago-kulio-luookafaumauahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2284c331837f437d905afc59bb18ef5aa1a5c8640cd12fd0d54ec45c42b60924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167511 Malicious code in teagood-nalikoli103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc4d9414709459e2417d0723c3cb3a98da69788c7b9e11c272ca7a5e79a0f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155887 Malicious code in ican-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6b7b18d491182271c86cf2e1045e656b5be313843f824353f38cd6e6d10f9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150548 Malicious code in @miptaa02/ayab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec355182cd033c5f14b99ee395488578188354922d188b41b612e21a3049bb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165112 Malicious code in riyanto-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f1276ef60132fd4de41680b77864b69d286b859d696f0c1136a8f95ea895fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165947 Malicious code in siregar-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e4002c7cba14a46eb049071605169f76b410060aa2f003474a7f3f61a7da65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155945 Malicious code in ican-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9991c0ef9b3242b720fde3a7c135c2313ba1ea9235c3d5018a30c5d5fcf2d100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167974 Malicious code in teagood-yakuza18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05d734d7c2dcb318bf35600b27f5b9313f5a9a755db7e821bc19b694a1bd34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156271 Malicious code in ilop-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cedefbd86e9e3fc160743282ad792c645b3c5551453755fe03a0bbe74c992e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154867 Malicious code in fadila-poke132 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b9bb479e339668d64d5729b29aad677f0352dfe0bd2f7befecf99ecd2e1fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dik-vam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e8545149de8189bbe47820357501eaf5e0c33769b58a77a45dc94f3516bade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156989 Malicious code in jeep-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555713a7473a8e49051bbf9c5c790009101ea3d8fd8769f9b1576190ba9abe05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160736 Malicious code in monadi-nads-ka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57aad40cb840687e091c482bf1f66aa81d3ba5c84e3697f51e7deb97027b5d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157661 Malicious code in keyla-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3dc266ea150af10a1fce000fd2f5c31be8d3bc6c23fc68f811ceb45b97f663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152695 Malicious code in angin-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa344cec433e6af641f76095fa2b53d2b2a122af020efa2625b8d1425e1b1361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160524 Malicious code in miracle-doki-uikayanabki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b62a903682843c420f2aee9ee54b9eb3a54ca3985f7d65f1dd01198d62ef2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160861 Malicious code in munidr-nerf-minsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cad8e4d2b707a77cfc5408e3a148db5e70482aae82dc5055da39fe23a1ee189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...