MAL-2025-154141 Malicious code in dajouka-d-rlac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5cba4bea4554a4914925e047446bb99538e80eed4a16d60b2a27b9b7684aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152343 Malicious code in alita-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2340d7f981f1e690c72524cac5283735f5a5cf337b3e9185667d0a8ce61c0071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160577 Malicious code in modira-fuhopia-janai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bb51ec05c64e808ec35a914f9a83ff48f37bae2dc9e01cf31b23cafad00905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154380 Malicious code in diago-kamoi-liumakuakoiamho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e8a3f40539a1a79ded3e88f7729523cc27591b13e102b4620cbf99f2b850d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150001 Malicious code in @mipta1/edgr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4bd34d783880affb80a7fbb13902e490b0fb80c2635f558b8cefd73402150b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158777 Malicious code in lookingan-namala63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae6ce9e94f95297dc1ebeccb23f0f1c17f48affc614a56501dbca40c894e9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167678 Malicious code in teagood-namakai25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a08b4a24b9ffde8aa6e60beebc52ee4a2c36cc930be6d82a5b5eab83eb5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165143 Malicious code in riyanto-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6503525046658a5117b09da9586ddde38a9a788a102e9c57152cd118c1b578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168091 Malicious code in tealove-aruma35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8782464b1e3666d619488b3b3d552e889bba4d0147b5e7494668ea92ce5f896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158682 Malicious code in lookingan-namakita69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6206875dc94a106cbef91b6d43f229664d1d290be4a9fd1f637d4ee994905c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e80c43be16fa4235dede1d4ea13d3274181479ccc459fb180beb53e57059c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/dxds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fadc474dc80ebe47ed2d91a6e5d99fc55a7c7e90c56b74c798dcfa373dc4755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 365745f50e4bee68e543c70f2026086b7cec1fc596fd8c6c808c4a8025f1fe2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofalib-biunla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4569fdc08bd40fe79f89b61e7b22fff126db8646f0fe48dc82da041eadefb2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vamukbupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a025f82f50ba7e11e6cb2b678d4d2a63dcfa71137ff4c1de09fa6fd3672558f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645bdaa7ea3ebd63a423346c979d92ff2a56eb2eff30d9e78cae905caaa99e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f3f791359f4cfae22d7aa0a844b686dbf1ab802111ebec15be6d18fd4bb7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ad5cdb516e273b95f7420ef92340a5ef25624a8893406cf9368920dfa0d5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fhfdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f36ac86db504976833359cc15098977d71a32fb90ff71ca54aaf82988e6de61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aliguaafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb14b0b955ed32fd9fca05661b2927fd0a8413fcc41351ca2183447f92789f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...