MAL-2025-167837 Malicious code in teagood-sukuna8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e37e87f20df7a296964e9ac83854ae4244602befcda72845113975663212a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159937 Malicious code in manttu-nuyatassdfi-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce0e954ddda61a75619e42f6362a5499842c7f8bb20460405b712bcf12f82c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150306 Malicious code in @mipta1/xsdsoopa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c45d0172a225ad4baa3d4b5f1919afb7f13085c0df02d247d193f89dfff75ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165181 Malicious code in riyanto-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bb35e04718541b0b53ae83cff506371c8f8f147666740967b6b1f3166715e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165199 Malicious code in riyanto-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da04cb8b8589e5254e53f5582d7302f1e31c5702c23ce94a0dcbdac5cdd9858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158471 Malicious code in lookingan-nalako6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7786298a5ea56f2aaa1f6b3230af008f26c8dfa0a75f10895831d171ee8155ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159388 Malicious code in manadsi-safifda-mundarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0adf4754678fe828a3f97f2289d9c5788b3e9c3e4ad6912b2e66a8368b3053a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170601 Malicious code in yuda-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548755b2a966433d9c646f6d573fdf9793791a416868249576d8cc0407eb4e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163027 Malicious code in nokire-nakala71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760d2632b38a9fb409ef73073039ae54ff5c9720ce540c05e08a2af1210171b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169490 Malicious code in uaragia-mudiffa-sayugauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c04bd2d9bc62fcb76536867968d345897736bb762cc67435435d75cfec0aebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158448 Malicious code in lookingan-nalako39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd53c59a265c71afc614782f56159e7e35b2cd19381164e3661917f64c710c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153902 Malicious code in bni-otaima-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf427762390d4f7dca174617178b5f74ee74eef3b27595c98494933e8f722a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157519 Malicious code in kentung-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02167f3e33f423e6bb6cd2dc57640d166f79210751b5760edc1c24797b3d8bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166880 Malicious code in teagood-lokika18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7a4d82214c9df82f6f18bd323d648700c2a9e971affb395c76acc4bbe592f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164790 Malicious code in rinto-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4aa2f0f0c08bc7080162f0348d6bd725922d1a01c77a491688d54fe9055b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169335 Malicious code in trevora-pisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b32a80dd3859367bc4874c07b1f081de4cb2c173ba9817f2db97626016815bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165977 Malicious code in siregar-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0600dc8c4859effd1ff524dfc2fcb4c1a948175fd720c22db177075cb13941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163994 Malicious code in parwo-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b08b891c883dbcc34c13bbb610ba08b71ae4a5468e17ed6b9422128b2a6401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150699 Malicious code in @miptaa02/gujd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f600174b932149476ee104ef1fba4e1f21ce7cae35fa331478bbf5fe58cbb9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157998 Malicious code in layla-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6955ad2da379c4a56fedbc2e8830f3a1c91fec8bd475a5e60ac47578136e1683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...