MAL-2025-156839 Malicious code in iqbal-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce27ddf328076ffb09bd4e0082f5375eecc8c77949318409d449b4a39a65f267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotsi-banavali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bf78c793688fb3c0ef5de4709413263a1aaa0c3f841ea410e33b1cc285649b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161661 Malicious code in nabuf-otomabin-nokjgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc637a59dbab10e8313b97c4dfd72e636fbca53d35c5c8fbfff2e596b342be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165282 Malicious code in ruji-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add836ee41845fcaa3aab963631f2597e7cc07cb968bd6fcf694ee45d3cdf6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154785 Malicious code in ewa-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d1efb8815b4f249409c4d5a990d12508e5e1da864a842a3657e63a93126559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152239 Malicious code in alfiansyah-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09cd7a1bc6215bb841310270b9a6129edde518316f7a6dec8f4aa4ece7947f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155283 Malicious code in gifa-ot-uofipfuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95125abfba8f224e1c742d4869e0129aa826de52d8a84e23f681689333ec4d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150018 Malicious code in @mipta1/ewrausjfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a317a789772c3130aeb025f867a0b6f95f083155388b68a7715016fb37d4525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150555 Malicious code in @miptaa02/bvvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cde8bb52a0cf0bf82cee79240ccc1265b76cdd0640d0dc8a54d874da8d386f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157527 Malicious code in kentung-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd09cec0f0d66909fcc590b7fa1ed129e1e0b1ff0a8ae5106521e76d1276c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166510 Malicious code in syahlan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca333eb7fa88cc9df6db7ddcfa724d37fe733ca4791e09389a66d80cf90a3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155663 Malicious code in hariyono-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b9f04e420fc1120dbac7c32f42573afc5c589a9e8f2d57d6c5092c9135a680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-run-script-ophiuchus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb8344fa0bf708a5d389890c5264e3d60bb553c221469e2dcda9bf9d1a03281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-scripts-koa-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8bd7851dd59a18465c76cea03c8ddae5cbf1b88a7a03c3e87200dc9451156a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-iota-ini-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d84e7df4e12deb90e73422bbd310ea7db2e28cee2688e87284777d4daf57bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-cz-conventional-changelog-firebase-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adea7e961cad3c42a45809df4c91724c86fb260d0a3f89b21880d783a5a939e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-sails-webdriver-mocha-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ced23e9d6990208bad63cf4763ab6e387ae390922047846eb57c6b9cfe68bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-commitlint-config-angular-cypress-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27fabc8b6619c335527c49d2b8fcb85fddd7995173052888ec6ff565c9fedff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-acamar-pino-pretty-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145f910abe8927390314d9dd02154054f3ca7651d75fe2efdae6636290baecd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-ariel-init-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac2f1987be8277ccaf644d8fe9257ad83ed8fffef022e1637db2b250ec6394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...