MAL-2025-156738 Malicious code in inufi-gobai-jagiagair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 379c29ea7f2f96444e833420678e3df691db3d7c8324d288c26dd6020bc6a7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152007 Malicious code in air-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b0ff94da847e2f0638984c15fa443b25104d21a1614303d4a94136e17167cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166096 Malicious code in slamet-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff366500b348402e835dd5e8b6010271244b2b5d8a7f5ab1980bf1fa0a142abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170098 Malicious code in upa-lubalauvalio-ilualsgsdfsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbaceda6520832936bdd3d76e731b8552c2f0f9b9fe5b9db7a02e96af2e4f599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163064 Malicious code in nokire-namiresan14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7375c35e50ea053b7b2b8fa3aca6ddddfdb65e55f3d24173a88e23cd439ad3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162357 Malicious code in nokire-arhani44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aa1eb94e95e1e1808190980727fa2fc20e92550390d0458396d3fb658e58e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164685 Malicious code in rino-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd093af895f7562a2b62d704d301258d53159cf3377cb46eafef14f63d1a6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161791 Malicious code in namae-nadua-mavxio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f065604f9a6628eb8443c93aed5804af6fb3b1eeb144b7050e30d52a0103e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150410 Malicious code in @mipta19/rie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba1d4f1691032947ab8f8235682f1e16379ea0dfc11d0a8fbd6cb2168b6ca3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166313 Malicious code in sunden-dibok-inumaliuinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bd4aa45c834c13961fdb3c876551366055b6837f3b7576635c38edd6322c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158987 Malicious code in madan-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d86d1424f01d04841efdc5ffe6bb3f2e926d7b397725fd9ec4f4511957b49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155880 Malicious code in ican-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503ac9d7076f3c1bae9b59f429951c27dc62e3c8da72875f3c4175b03f5a49f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151552 Malicious code in abu-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e422ecdff10964345903022b698ca0309db0309ec39fa0b4ecef626cf3ac63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167301 Malicious code in teagood-nakamala37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2d30a27f69099744d4fcdcaf1e82416134574faa51c4a41426b1e5beaf16ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150876 Malicious code in @miptaa02/nyaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d9d3b5ae2e0b4217e9adf4e59a8268e5d25bf0a48f7288f4bf0d1a09750566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169444 Malicious code in uafagarug-midefafoi-fusut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f7b092b082e25d1d8c76695f8d10edac48984fce3ae1215ee21413ec867e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159410 Malicious code in manadsi-sdada-mivafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3477bc53f65d004f3956522cb39b04bb3492f4de77ffd5733b15f177a03cc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164417 Malicious code in polymedr-mindat-buipenajaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0c96d1ecc0097687d138a25b5fa4339312f3f1f2d900db7731fb27cd6bc915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158022 Malicious code in layla-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe737f785adf5f149965e8dcb042d524d4391117ae6c32f273ae13cb074a0d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162952 Malicious code in nokire-loklok93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390f50504cd3178a4b576b8c578690d075875e728e4177afaad8ba7ea01f99ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...