MAL-2025-158419 Malicious code in lookingan-nalako11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c118584112b795689f810473c91afd322d500804c8df8521c6a39e008820655a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169566 Malicious code in uaragifa-maranufu-safar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0fdd83e05600ec02480e26152decfca9174082d95f7d09c8b71661b329e62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166864 Malicious code in teagood-cuekin94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd2228ab215ce256c0240c622ed5957aafc0dafccec808e0d7730bf2c29cdc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164770 Malicious code in rinto-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd0b6a86f815ac01a1db46314b1c880fe6de431b1d6abc3f73f07ebc5a7f44e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164582 Malicious code in putri-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a1cfb7ba8a73b98dfb182f4d3e0e33a3725e74b05cd2ee62a9bf4a771f1f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164712 Malicious code in rino-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a9378c45aadeaead0f20da20a9c79b6528417a988ad2dfaa4b2b90295b202f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157845 Malicious code in kuinsu-uyilu-vikun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1b4fff5f5b1ea91e5c4f0920a7a1fced90409c069ce46b9a8cd831a3c0c5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152108 Malicious code in aji-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2de821e88d51f1136ad42184459e6b65109dd74bed04d6668ed80ddf21468a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162620 Malicious code in nokire-kilua32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed55a509c1ffe68f568c7dfa10f7e32190b599a4b0063b84f60b30411cc8951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168215 Malicious code in tealove-dana10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb15e2de0dded4a526607a38900bfa3ca603d932153e155516b48a2934cd5cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167299 Malicious code in teagood-nakamala35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8496289c81ce27b027473de349ecdeaf3435aa7c4b264b2752e8beac172f697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166839 Malicious code in teagood-cuekin71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4a79c6b7b7c2f6c181aeb2d5ac7b14a73a38867080d520dadd065deea15838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160118 Malicious code in manus-tavml-maosiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 625b3059c5e5200ebbcaa77e893887686088d5797ef1b16231578b051d595ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169345 Malicious code in turisna-reff-derfueaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb6af53bec2ab9ff95286fa12143664b387386a82064ace16097ac65ea3c3ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155933 Malicious code in ican-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db8dc1fa31b0247dc65e499049d20a543c48fff340559846c7e72b086b15e5e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169317 Malicious code in trevora-kisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65d5403e170f5be9739617987a7ff606173eef8d9faab194a2a6165662b9e27f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150883 Malicious code in @miptaa02/olaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49f8a463f8eca05bf116efb6376cc710471d8a0fd2f1ace4dfe5ba0a3300f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156704 Malicious code in inufgi-gotumafa-anfoaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7388aca7a3d775a4e7974463823ba12999f591dee857b5899619d03377aedc5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168567 Malicious code in tealove-nokire39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e22e966d72d6c0eab94463604563a2a7bb25c7ef1f6367662d10fd83e87798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154418 Malicious code in diago-klop-kalbk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae6b601b57a543ff3a70009a8532baa3a4bfc11c75b7c484486a36b89fe28b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...