MAL-2025-166018 Malicious code in slamet-poke114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cdad22f52847570582d24898f3692d64cbde2d5a04937fa4ef7a8d65018ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166404 Malicious code in sunderlan-ud-vaimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ea509e61fd8481f69bff8732fb37db5d957cf4c38b43be615cadb3e421bcc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152385 Malicious code in alita-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435ad6cc082b751c5fb308b52b8394457018a47a3ac55d72999168ac5d088a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161688 Malicious code in nabuf-otomian-daju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a016a08d7a674076314810ba64fdcfe05a13bed8ff35f86dba9cb3c3edd7604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163765 Malicious code in nudela-gagafhf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1b58194594a1f8ede0552ad50246e0c4c1095e322e17ce1d055843c1434155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158539 Malicious code in lookingan-namakiki3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ac780cf60e98d011c03abc970deb2c086d2fd55f6ff5f97cd533be3108e75fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159166 Malicious code in makaimaigan-aniga-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d019f4c775d777d3a4a33b6d739f44360aa9c86558da6ae66e36fc299e571648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162802 Malicious code in nokire-lokcek47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 872803af115fa43448205f76dc6e7f72e7bf4e69c65f2e5452d61042eb7e7268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150008 Malicious code in @mipta1/ersata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4248a2157209e494d4100926bbb7e699582be8f66fa4212209a652f071631c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150757 Malicious code in @miptaa02/isafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6294ee378c5ac6737b27adc786c96eee83eac7a52aaa21bd0d996854d478e12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169420 Malicious code in tusya-fsd-sdeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d35707f319d4e868c1784aea282d809c4b8faa899fd399c34c523da73947b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164823 Malicious code in rinto-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75e24162ec5f98e1bb829ed130945a01c729ed6935e005f86a7c11bb3fd97c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170276 Malicious code in verify-aikun-miaiaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ee4159d333d7eb7efe8c4d889d14e4cd25364ddfbf1245f09ebaba6761eb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/loisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d464c7df50dd2e0b9d07fb864939e7eda575043e7fc8791e7b6e0c2babea6672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b8904871b495a9483ae0d914a4ba8af11e1298958028666f40b8ed770f1e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fagais-fofaguyafof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46201696c2fa8ba734595216f748d55383c7f2579efee34ddf8b95c605a7cf23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyud-vamuanmuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326afedae9cbb3acc9b828f616183216e859e46b76a4f4bef2e4a7ad95910a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-example-forest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3481c8212d784b52ea6feccd740e21f8d630b446f33088b8fe6d96f0bb450b97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safadia-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b493f74dcb9c3fdb730c73ac03c1424b7c863470f9ca8a180179a3b1ba3d54e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e41b4a32937d74aeb7f41c6fc1eec985af8c2bd17311ebea29f576710731aae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...