MAL-2025-159538 Malicious code in manaf-masaya-muaanst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3763b06673f8ed770f6976fcd8de173357b0b4823c027ba71f896450021dbe53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155624 Malicious code in hafiz-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b23e7597444bb8222442d256456bdee8ae32dbfc1cb1519a5708c812c98a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164753 Malicious code in rinto-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edcebbefc3421b1c302b889092c12d761cd00768f6aff3e5ab6dfe0e75ece8c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152356 Malicious code in alita-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d23e87cfccc188d933fe25aebbfa9c1a18f4e7a9fcb0ef2ee2a5b881eabddfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155520 Malicious code in gurs-manus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503d732fe252b9a1b5aec8e5d3f5fb2a21e43d50ed7a4eebf8ce74d9ac13bfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165440 Malicious code in sabua-muyag-dafumaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23dfbb2602a55cd75492d78327b3c4488dbf709667dc6e1c122eaa91a9e34e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170462 Malicious code in verify-tactiva-mechan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4328c65d85b9c1aa2f620c358ef6bc3dc6df5cd00ec6ed07ebb529695d6194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167029 Malicious code in teagood-lokina62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35c19027d5910b422175d2e9cfbdecb957e159038b7a613d41b8caac5bfef8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153486 Malicious code in avomainah-fr-fada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3066fb4bbab838d0ea97de433f944dea3c1e54ca39187ca0fce16ccc08befc26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154360 Malicious code in diago-kamli-luaola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee7ddf4067280813f70066a6459acb80f498614713f57be8341cf635ca63441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162715 Malicious code in nokire-kore28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fe4e4f9afaae5a17e837c33670806b65fcaa5fa521873b41c6bcd3323cc525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169797 Malicious code in uinsu-lis-adakinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8fd1c145028d2c243b5e95f1105de4778b26c8eef00dfc04177d691a62c178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168600 Malicious code in tealove-okta23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44cdcb70810e767d8f2eaa6aaf77d1ac5f5b292a2916a2fe9afaa9f69ed27e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164207 Malicious code in pilka-luniu-kanukuaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84b310b6026a10ea67b4d4573931848dc4606643f71acfd235541392f5a46dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168405 Malicious code in tealove-nameka23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcd0ccec895ac6516ee2464aa927c4e56f8df1d0563f1498fbfe726280be7f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165925 Malicious code in siregar-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42ac654d7eac3617514cca271eb50d0714c97c46084d33bbf052ed8eb28344c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152521 Malicious code in alvira-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f549283d0ad62be156fa410bd2a0f819555bdf9e35d52dfb11883044f07394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169005 Malicious code in tehah-mkottifra-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b14d835b0ac81418cc656c7913d905b2c07bb347db35854ad7730c65e610af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162326 Malicious code in nokire-arhani16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f0d7d2b32ffdc85aa3721d67e4cae0da11e5e79a57c714dbd21509b07ec9172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166583 Malicious code in syahlan-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8819439f401501c18cfe40b53695bfe50fe5d6722d49788960ad7bf777e16d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...