MAL-2025-160951 Malicious code in munisdr-nserf-saafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20aef3b9a0614a926d535ad50a6419c1db97b7075a89212120bddd55bb5f1f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150107 Malicious code in @mipta1/ksoffgad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6d119abe2425de6b6f3e54cce3ac011434c9863d88ab9e725e4a457108bc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159161 Malicious code in makaimaian-aniga-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4fb361b07e4f34902f18f142667692dfaf51a3053746637ce8b28ab81d2c00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150822 Malicious code in @miptaa02/mdsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba18e9b77e30f3f7e914cb7fc532168c9d8fa8fb55f3b03d4d0acba218d2a6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156036 Malicious code in icha-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d2f9c2debd975432a740cc0d3e8fda8b33ce9ae065ad2b6187057ccc50d143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150673 Malicious code in @miptaa02/fsis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4aff69e1c56951a72fe5de2d3bc673d79b799eab582f6aab2a5fe3342d0ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158892 Malicious code in lookingan-namalaka77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc29df0c72e26e3f445ad750d88531b62401b2d0d825da38ac37a21cd8d6cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166221 Malicious code in suharta-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a432d85ede3704314c19bce75cbe07456a4bc2f04d5c9cd9a2f463f6b6032c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151517 Malicious code in abu-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c134254f2563763da6837da5b1f5ce9873238f6865eca3fabcefa9f186696107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149972 Malicious code in @mipta1/azxsaxfsix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6db2e881e6835bef342d5a61930c514fa32fc9e7d1c156cd34fccc95ca7531b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526a9b88e54bfbd92d70285320f3cdf2d3b62a3e7532b37fa32fd740f583f9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-siaiama-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af0374087bdfaa840557d222dd993ccdaf9d08bca2973c5ad43fd9d98bb1795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1d8163afcd86de6619144a3708821a2cc842841f74e497e21b91a482fc412d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bccd9a753f279bc90713954dc695c9e3ec432ae25af9eb772b2bceec642c5637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-murasaf-mant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9968411e5face8b7f5648fcc45bbbd0a34395558d7c9bac39f0d6b3e6839589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e096d982885f6bd11a13eaef805d3535d539a4ddbfd4a406421f31669dfa1085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159555 Malicious code in manaf-yuki-mansua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8bc1aba7b02ecb8ff0d98b7f431436a603062dacc156922ac4d8cdae1a7fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d65f1878abe15737a771767056877cb4c6d3fa38ada50d1fa958095833b1371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153812 Malicious code in bitha-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d22490aea5eaeded2701dca2431291f052c34aeeb91d0b91c0eead4031a0bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152032 Malicious code in air-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecba93b6f7dca977a47980bb7f01cdeaa595a32ffd5f559db6d44fab5561ad92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...