MAL-2025-150219 Malicious code in @mipta1/sdaasfdxs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7db89382ca3b334e7707d117ca89d924c6a164feae3f42adf98a408d9ceeeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158040 Malicious code in layla-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395d61c5693975779df44414092116715e65f9772751ffddc83074808b6d17f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153930 Malicious code in bufpani-mau-nafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe9e2bd2e1d52cf173d15f9299809f8ed6753a171af4ab75f9d4531c41200f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152976 Malicious code in astia-alao-mafadi12pafaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4300c3a4b039eeab29e11dddec5e0e99d51a161d1e767aa0ff6607aa558679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169865 Malicious code in uinsu-losiat-daivu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d01164758f4ba504cfc85b36962c2b76753faf90fc83f53aaa3f7ae15cf4187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163254 Malicious code in nokire-nana95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bbcc85f0036bc8c139ce700340254c69a585049ec2879986a33f9bb323336b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170569 Malicious code in wulan-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6eca9adb399c0a739edc4c8ab3be91e56c237281aab92a70d0492eb04ee900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158974 Malicious code in madan-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e475059db0228730b93fbe8ea17cb3b2319ff5d339b51d177e839ef5bd7102d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157727 Malicious code in kuinsu-lubki-nasiuvanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c20e93085328ab0fe78b397da68f9c35edf9304186ede530748fa42bc1186f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159452 Malicious code in manadsi-sfdada-mabadva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde3787ec26ac2473b6f643016f18b474d505c5173a16f085d242000b47ec74c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170043 Malicious code in uinsu-lotsi-banavauli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a190ed2a38e048e5f0439ea43fdadce912033576dc9b77c81658bd4b614f48a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170492 Malicious code in verify-tayic-alibamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252aad2ecf082b52a7d6e64e891f854a65f4cd61950ea97ec83801cb587d2b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165634 Malicious code in saku-aimau-upuanmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282e0b5cab8d2ef25f9872338b56c17853c6b6ac51f7950e1d41ef0753c2db69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164658 Malicious code in rino-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b702144d58be44763d202667af0e031b64e1829ce1716ae0e1c2158d6af16e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153795 Malicious code in bintang-tea45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d997d4005364b9f4c92a2fe1f98d1d491303866d09ef65bcd04712a6b66994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164228 Malicious code in piluka-ali-ipibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97cef7ced91e81cd99e5d0a15d0d7caa4745f6e1b546fbecee52fba5c15760f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153606 Malicious code in azhar-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789c37fe10cdbf4ba79cf91eb24af79cc8ea3b8bb93dd7d1df57ebd5d1e3b436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162660 Malicious code in nokire-kilua68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8ea62c31affaa574c516b58ccfcbe44fe2f499fcacf5d178139ac94a7e988ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152848 Malicious code in aril-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c69a08da4b2178725f5f34cac51bf71e968942a5c3818301c80e840b7509fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165717 Malicious code in samehada-uazsr7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cfcde91122897abc462f73910be46443d0178b6bd4dc2d18a06ae8e885cb16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...