MAL-2025-157209 Malicious code in jurss-sdd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b630226d079499eda35130407a40d0016b613cf98059bc31f62f3db7a2c598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151817 Malicious code in aiboa-mioloipe-agat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17892c1e9703e9aba5c9ed6cf0b754f823ad760449900427152c7ef8a026e53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166951 Malicious code in teagood-lokika82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b813430588984c2947fff87e2d2b660e1c4f746c1900c439655c2fea94c6f893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154026 Malicious code in carv-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f5efb54dffe3e8093211f6623f4e521fa3a1e350723479eef0780fd6b86ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164796 Malicious code in rinto-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c98556e783a0f828eb1a94dc69fff38f89790eaabb6292f5e3c64d43239d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155651 Malicious code in hafiz-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68127e681d4f1ab0e058e8d640213b9ec973d31969ab4fd8c2aa6ba0e72662e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168615 Malicious code in tealove-okta37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511380a2f0df780d4fd83bc19b5ba5a41c6d7dc1f90a19c81c7c3de087d8832f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153974 Malicious code in bufpani-myau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d5b595c92144b889280be2bba44062af9e4a4be2d42ac2d88d3666ae0ec39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152029 Malicious code in air-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70902ef95f5216486736aaedc05d335c6ae9f52f81729832bfea6e21b99af31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0a21cf43d595ddaaaa745f78a92b84cf02b441c64317b39e72e67ea86495c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a523562d60e1da58de64f80041dabba254b5a6566db091dcd153132ad1e7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamoi-alaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898872a7865d276ea81a9257ae122f8029ecbf0865d606d0ac1079dd34df8a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-nulamn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0cddcb41b8bfa9c4fe410a1ad729d966a77aec1d359e358f3dd81db966d547f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c953f36cc6a144324377914d234f1223403c24057cf3010ea9b2ec2b3b09222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160793 Malicious code in muklis-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cabe63bbc37362478ccb8a8f71f9b5f2a8c9c4c02c9b9e3df603f7e6671e2932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abufda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928f5549a14f2b1455a748fb91b175573ba88d979622e4e3dec288ff792640ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1703e7d2a5dcb7b50925220648e569ef3c724007284dd2eff9b6eee742ac93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbian-ifbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719c184eb94768000d26e09da5d4175a39571e54bd60c2e4055815035bb4354c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f25a8949554335c7ee62f5836c8f26c7d7de67a58f7a2bb0591ebd1258eb32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e935ccb3b06a6dfaa20c831bdf1dbe0e442f17ceb8f4007e7e6ab9d54e00e6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...