MAL-2025-155228 Malicious code in fitrok-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442aac2fb861bc7dc28268f309384400465556a30564a2762428727a5a3333f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159700 Malicious code in mans-manapa-riskifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37347539907ac4780e3999871c9e44951384f6e858297589ffcc139b0a50a506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163407 Malicious code in nokire-sekiya2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e54cde46a7f32f323e5a02d48b29eac36fae684b94ad658c0a96cff9174b2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169916 Malicious code in uinsu-losit-dilaubaamukabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5724f7e26ce22aeaa6160eeea503a5e8de4768fe5101998157401f44781e7158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156282 Malicious code in ilop-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7cc6d6aa9f89e1660db6bc067344e8032b577e8ae5ba94e929db47e75b79ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160436 Malicious code in milisa-mioya-muioskfp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3849a1cd6ba4c8f8baaeae495563d690f34b85c372cf6b65d0d829dc43d02c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156998 Malicious code in jeep-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2b862a826d3dfc87d72249c13e6e234e91559d6d21904ac880e3b24a2e2523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155397 Malicious code in guras-kalima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046aa16d8d180efa4ad78a4e570fbcd3142cf386cc7c63a0e2443cf83faa34df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169979 Malicious code in uinsu-lotahmi-nailu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9686ff14c2345f72c238f13efec571b6b3d9c49e2f87e84ce358eb33f6d696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160287 Malicious code in messi-afta-fuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933a56284c407da2ea9900ec88df823a73f080777212e1ad25633a04976d0a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157909 Malicious code in kupai-ukuta-jokakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9403df0ac44289fcf3a0ee48d482d81c3a8dc15893c2b6116d5163ea18496c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143533 Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145407 Malicious code in net_halibut_azure-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ccd9260aefbd483b64e742ea18c29faa0cfcca01c94a0622f4fca874d2815b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140127 Malicious code in bright-jade-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca0b7a8fe76c790a8f0966c2d9b1b53750f83ee56f61e330272e75545da21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140784 Malicious code in classical-blush-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4788edf05fd7a84c1d50968e29cb519dd07ef3c4707662ff8b3ca19a6d3ee6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140402 Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-sails-commitizen-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4f60ba37c31708e841a18d02c5a96f5764069dd2a82bdab58f42782883cd4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-zenith-configstore-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1190e910c0d9525842cb1b622a23dcdb6d56ed8baf21821891533ea0f4e2290f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-cache-toml-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef962dc2ddda4a777d28e0c834a6966b710012d753d59593ea58cb19c23adde0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...