MAL-2025-154940 Malicious code in fadila-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa4ebb6a2b96c8737a3c23ebcc0deb06ed46961d45cbc3df25304999aae93d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160851 Malicious code in mundya-mispta-asda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5716d1711e5f51dea682aff2a0837ebbf0577d5defb86a8fdf57e28d691852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150569 Malicious code in @miptaa02/dghg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f69591662f491700c232f1eb7f409ec6378e1d48af0d58405bc86297c600064b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156865 Malicious code in iqbal-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2226d24756e7c41e631ff30864ae33d48d28c0094562d810fbbd4028bc581d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153914 Malicious code in bufa-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7a8a3a1420b84a67fd0c1f8b936885da6addd481a5e8b1e215511e1fab5e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156400 Malicious code in inal-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2364bb0cf3345eda4d21f886f6d94f6d836f1778dc9385ecef31b7496d953a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150596 Malicious code in @miptaa02/ewas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11297cba1026799f7b2a2eb6d8b3a09343a6aecae250440026eb73fcdc82e19c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161165 Malicious code in mutrasd-sadiss-mutrio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01aed6cb19d74f01bbc0d301ae14950e10fc7e6be70dc693b486a179e8b801a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164699 Malicious code in rino-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed99fc3f7b969f5d0cfdb548f76a22946ecb75b7c9e4878ed69fbd020432f639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152291 Malicious code in alfiansyah-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f77f11144437337a823c98ecfc2d36e87c497a6cbbdf08fb04f5f3594015f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167339 Malicious code in teagood-nakamala71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708972f026f574ab3eb49006e63c50a1d1e3cfe326683395cbd6ce0c99601c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160906 Malicious code in munir-nautyt-minah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88f1e90f45be4e91ee6f6752f819624962615bbd3e57f6556b4c27f5b595ef34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161106 Malicious code in mutaus-mansis-saintsse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2171ee97362401fa51c9b3cf43724b362eb596b586a210f3da561a6e10d1598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163929 Malicious code in oalgo-kilaso-akiamako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b089b0cf4ae11dce7650dac477b0638df6f37982a33bf92189e10bedf4cadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150020 Malicious code in @mipta1/ffssesusid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f286b2a5f77bd2c8705638e0fb541b7e408e4906287bac5e47803ee96caae9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152723 Malicious code in arif-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d1cae547fcf35766c7620a62ae7b7dfbfd9ef6e03fe78d9a8ed5068a6aef9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153187 Malicious code in avminah-fagmas-adima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ccbde7916c7e3fea9b63b483a27d74ed5dd7b6770f37541902ed45a02cd896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154959 Malicious code in fadila-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ef192526924771776c5b6b0105abf06d5991aa7800f10e1cb21cf84b006656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154967 Malicious code in fadila-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cbd3a3d481368b5fc79ca480cb0dda388ca54f13bd020b9cd9deaab9fba05ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164456 Malicious code in polymer-intfsi-adutfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabb04e2c739d7a97cb9a91572859c9d03f46f65d775b090094747ca562cff6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...