MAL-2025-154881 Malicious code in fadila-poke146 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9f49db90e4821965f3c5d6fe2ccb9b2ea4474c7480a8da898f5f40638d947a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170528 Malicious code in verify-ticul-biuyaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988eb6ad7547010b0b23fdccaa7efea28fd9ae78e07e3dbb97557fdfb8532199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154645 Malicious code in digo-kaimoi-aiokki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb956d343eef5d72bb380a05a22927d46596ebc47a6adab55982478fd5eb255e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153291 Malicious code in avminh-afaais-ifaffofda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0023551169380428bbd5feb40c3479aa902c210efa3c41181fb6c896b322f0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164205 Malicious code in pilka-luniu-kanukkuaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d9336296c4974308ae5d7fde2051b3fcdcff645e862488f19c11bbba7135f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156847 Malicious code in iqbal-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad72580e6aa3d669ce3aff32962a1a76a1d549ec14a6b8520000263d5b796ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158415 Malicious code in lookingan-nakomi9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a223e4430f40138e266837f15584f10bbe7e9b3725729107392489c9938a658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155204 Malicious code in fitrok-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1fa211b3394c3f2e2c733a3412d88468bbc8bd746a2bbe06e69bdcefa69f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169601 Malicious code in uarg-mstuhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747dcb498e805de4bb4ba4e49fa30262d8cbf68bceeb213715cf2d4061cd37ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164262 Malicious code in piluvaika-kaiu-nubuliv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7620dbbbae8c843bd1a049e76c1a62a65a9b17a1e457ade603ff27b63949e9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154639 Malicious code in digo-kaimoi-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4daf305842103b869a97565fe7e34103437580e9d1bf86a7ed937a8cea9aed4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161308 Malicious code in nabuf-ogaf-doifgako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a9195da5a38e009ff929f3544127c1009b4f1928ed40133544e30a0649b5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-phoenix-hermes-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f13dae0a6b9099cf69f24f905c54a9e0d5e3b7825909735087f068e4787d854d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-gulp-quasar-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ec1782fd94cd2a052595c443f107e56f998bdf4ed021084cc0ac67e769f89b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-wasat-charon-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8812a5f00b2abfe082d0356b8481321b48341d4051a93e24483b59a2c6ad66cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-ganymede-cosmiconfig-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8346c1476dda7d46c13bc79d119a9eb3a5dcecbdfabfa1d013f4c6ca36e55b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-elara-eclipse-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048347085c1a35d570cef25eada38c7e80fdabf3e21687fae65165bcf3933e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-stream-toml-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ecdbed3d1f61979e80b7310790181fbfae8d2f3d11f3eea7493acce573c6e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-atlas-dynamo-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14187cef271cc4426484306893a6fee37db7948f0787533e5623a7551d59d9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...