MAL-2025-163397 Malicious code in nokire-sekiya100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534f8dd40b41c73f87d2911a1cd0ff642b5f022b53e78983d346674aeceb489a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161944 Malicious code in nasrul-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa06cd47be3678be1b1faa36a5de9c3d190b7a33ca1b728799cb36a9b9c78910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f723d10e91785fd1718bb92d56c07f922ae4ac404d48dca0b0bdd7786e65bbeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166115 Malicious code in slamet-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4faabd6a842616b99973267ac54e63a2a08806a2f7b0a1ba0d03c8df50107b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acgiyuyia-iadut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db12f23379658237d457a718e2bae7378918a87f1217f0e4958414a7ac32d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-manus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26cdd68546bc062dfc11deff17cb83863d148eac00cbca8d72806a59bf4ab39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27366417758a82c087b277992143cf1b282c75045d25d1728b9e4fe148c3e51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163446 Malicious code in nokire-sekiya56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6636885b62af8607b7af8cbcaab82f74fa16ad66da52b4abffc764143d6e70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamoi-liumakakoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230ea71c3c1d595ac9ccef996195b1d90c3a2e2a6deefd3a736290cc1a6d5344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-sadasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d674dfd7bcaedc879301666a7bb2c2795b44162d9c371b363faf46e070e5173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-dfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6985ec93b5eb7dfb79cd55acc366fac623a4d6db147851384fd65fda0239451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0623e911b9ab7a35d3773a37166af0e3dfac7f182589231da22eabbd544cabc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151078 Malicious code in abang-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeba76b3f734b47a24293de1635b3cc45bc0abe766bb6f9823cb9fe0625488ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150665 Malicious code in @miptaa02/fsak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f989f549707e525d508eb036f8ce54bacbea47b8c65bc578d6766ba039f126ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-yaml-yildun-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09671570cc0ec4dbf6e1be086b159d12ee823cd32564bfae08539f2b51fce710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-postcss-loader-enceladus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b7e1975ba8584db82d63f8d4ed5cfc113066d24a35aac8206fb73a8d4b315c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-supervisor-markdown-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60cdc4d5317b650a261573ff13fe8a451e6e91f68730697fa7045ac908f307e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-aldebaran-nashira-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1575e1db5935e5a93f31d629ad6daf1a3a9220b1bcba15d162499b8e542dfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-native-blitz-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e9c1ddd23dbb7b4ae51e472bf7ef3b30980708e67a3f5144acea3514052e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149801 Malicious code in yaml-polaris-loop-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5dea1ed6a0ab78b929231fb50636b81477ff4ce75ea8c5dbba76e18abfc479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...