MAL-2025-151719 Malicious code in aciydua-idut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff957eb868b146a7d50dc37b1966ae163463291301cd4f0b3833ccfbcffbc300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163907 Malicious code in nustar-miuyu-nutyufafian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d415aee5f3b89f42d1b909ab338eb85eec77f312686d4469263380cb0b18fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165924 Malicious code in siddheshtea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bfd4098602e5b991515b4466ac7b118257e8d15a8c321b8c1c700e2264009c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158789 Malicious code in lookingan-namala74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd665c1bab413411f0c9a00c1eb3b83fefd47f46463cad8dc55a27740e0cc223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158912 Malicious code in lookingan-namalaka95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7528d3c70e5f507ab8c262ff1eac5d541dc761dc094c09c6c4f7440861358ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157028 Malicious code in jelek-hentai-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c0c1c191ec0a6cc8a39711d8634a0587d0719cd252abe36868b6334a9fe7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otin-agogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 113198e1113933c28b29a99c0b25a132bf77625f389c20e8cf6f956c3849294a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6343bc62085048e7fd566f6ade19a97b4b864b99c213869a23be8f6e4f0db06d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-danger-fanthom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be882fd01b919c51643da2203626f71a1103653d37a1f471a4ac8f29a91ccb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16182b6155e8ecd6dd360ed617e85ea69b422d72c12576126f71942a6f10ae38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiaala-magolani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b66018bbe037de700dc19ad4ef441c2247e185aafac247c50a62a0142bd99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158798 Malicious code in lookingan-namala82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61752e0ab6eb1f50dc4d4419df5ae85419d06dd13f1bafd970c3f3bbfa8246fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157656 Malicious code in keyla-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f0288a1af93850369feb0088c84d3af59a76581152b8f44e36aa38b9ea9b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayca-amalauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc32de0391c92cc2b8cfdb658bc11fb7064503d3989fb5629f5be8674ed4242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-enif-registry-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6ac6a6965728f64abfb8f42a82d75becc9f9347d7f4a9e8279711d36bb478a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-toml-carpo-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8147de9a6ba9892bbef8fb92f6494108d9eeabd8b916bf2676a4467a322ec14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-acamar-pino-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f52eb5feb86456ab516fbdf3dda48667262ff5ea6e7f05e4fa7fb2ecace47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-relay-request-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47db78c95ae987d173aa06cd11ad9777df685935d01b883b22c230b76637f93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-ini-neptune-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d671f82c7f19574d9b1990a7e60709d6c330a2fab980614aef8bdece9f0d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...