MAL-2025-154034 Malicious code in carvahal-nutsr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d049b7816ea5f224b0d53f0bf5d0fa46ba8d557462160e043f6399e9ad6e1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168778 Malicious code in tealoveness5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d455fdc2964e2915cd678781ac30849d618558f1ab572bfe95d85bb8099e19da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170166 Malicious code in upilkiula-lukuzili-ilakuzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba55797ab753daa3ef2ad740f320371f08cf03395ad327b6eb476f173495b49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167517 Malicious code in teagood-nalikoli109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c73415bc9718b4613652cfa5e806ec28eaf33dd37bc429419d7f1a4c21291a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165756 Malicious code in sau-nai-iuyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb782078474374905ec834bfc162e4205cbdfd15f7595208875baefe059e59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150813 Malicious code in @miptaa02/lzgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59f8008f90660c0c70094341ff1710dc7f999eb0d90c2cd95e41cc159baf1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156923 Malicious code in ita-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a42117652eea8fee4ce78b70aabeac218ca284dbadd5bd50e96b5b754299b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163081 Malicious code in nokire-namiresan3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3848c2560816823666d6eca459034d74a18f6e555439ba7d3a188ed2a7ff567b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161774 Malicious code in namadata-munaroha-mufanaisfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41a9c626bd977743d61d659834f61a1ee443f7b2aaf9898d8364b2221a891ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165322 Malicious code in sabua-muhafi-nyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2c3bae652d774482821200fafbe70da67fe620cc5fc88a0a925bf907f91269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150144 Malicious code in @mipta1/mikfaas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e9e908ccb07d203c8299d0fe99ac30bd0b6fd6e4eabff99a6c1756affabc18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160721 Malicious code in modirai-igono-jiomigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0cf633c78b5cb08fa085ce33c983011461c1754b55e938f3742756713389480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155957 Malicious code in ican-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d703613bad2587583db3bdb037c2d65cb352b564a68623c3ffa1a451884e5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157103 Malicious code in jimmy-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b38f76c71542b66142a48150b6e2a3c0a45953a373902b197e231d2eb1a10c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165225 Malicious code in ronaldowati-cir20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88faf83069684f829a4df59d52b780bc258f8a038f1296982a11562227903800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157859 Malicious code in kupa-lubilio-igugfsdgdfdgsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3d3fc015ec1ae6d757cb3db3500060086646243e637e809207823ac1531c6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154624 Malicious code in dian-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e767d7ee3cec539d495ce992eaa11912cde6aa32cd9d515857903ee3936ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169096 Malicious code in tehnah-managaah-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f7b2b626e07a4efd6a9491b9c86b1f888360c21ec682561430ffd80362012f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168950 Malicious code in tehah-c-brew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afc886098199a31cc98ad8d4ff2f276329f82e07012c8b0cad40146d574b4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166546 Malicious code in syahlan-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46523ac99f86d8bc30bc22fda846b03567c73db502087ae41bf09ab2bfc69e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...