MAL-2025-170559 Malicious code in wulan-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1131a5f910599783d9827a72e85ee68867af77c422096353feb5490d88c53bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153228 Malicious code in avminah-fagnias-ifiafgag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caed87dc4282d3c3ac978ef0afcd4fb75d263a2364da2eb7c1b0573ac4c8bd3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151313 Malicious code in abih-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac17b372b6e6512a392bce55d8edaba13f756adb3c273166e8b06c06c97554f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163623 Malicious code in nokire-zenitsu35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd3ebd6db86383d7b2d9389c51b7423830c4e19d08e3692374287625cab09be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161432 Malicious code in nabuf-otgnf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473aeed7d3081224bb508d832e3253b1500d6841bc4a20f1a4d995f25adfe054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161248 Malicious code in nabila-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a977429bd57a3fa1be150866bef0788a20d83f96ae93341b258eb1a9a0b835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150863 Malicious code in @miptaa02/nma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eff94a78d786aed6c3725e984fa9d3324ed84ac398dde80ae7929923eec7a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169450 Malicious code in uafagarug-muafie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5685e25958a64b403a6e4f6ff6bb662081a710dcff4f232d73d52269ceb5f9ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150662 Malicious code in @miptaa02/flage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30473b323aba80a6b0c48bbf174911390c723281b21aeb732a615332517ea89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164232 Malicious code in piluka-aluni-ipbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51bbee1762bb2cc3b7d86645c948a3c53df3ad665d45cdefac72837bd0cce1f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154341 Malicious code in diago-kalop-kaloso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ffdb3128260da3fea69493f06a529480d09b1edab07cdfbeb8d393747e6887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154969 Malicious code in fadila-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb319cff94af2865da99da3c5aa6ca51134abeb9b053495dd5b653ad76143e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158879 Malicious code in lookingan-namalaka65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4042b5dd5bf91b51d3d6c98247587ae2f08d552f878f0ac414cc670bd346be09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170111 Malicious code in upa-lubilio-igugfsdgdfdgsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553a063ed8d01293b1ccaf6453cbe212f2dd3111e8255b2153c8001aa01465d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150986 Malicious code in @miptaa02/tpokd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da92de720d784beb450eb1beddcdb45b394823cd5554bfc7259736c8a444cddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165567 Malicious code in sabuvauakli-nalabulaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55bb6dee3134755dbf9204c4fe12beb191744d2512af24139870860ba910415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154825 Malicious code in ewa-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d916e5e606fe163704b45120d764cbdf6a50f0b2e73477f37b414bb2e5441160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169818 Malicious code in uinsu-lisa-amianba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cdb849d75cca7cc8e091fa6eea2e5bb1f0352240a4f700c2d8ccd80c8af6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150983 Malicious code in @miptaa02/ton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a854e906616d03a47cf52173406175addc9585c888a6b591480685bfbdcdc47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164414 Malicious code in polymedr-minadus-buie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f866204b08e49786bab69eeaf349b28664138d1d988a5d240581ea41ff715f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...