MAL-2025-164028 Malicious code in parwo-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e915035fc1673f117f87feaea9be8e042548cedb1d0225d7c2a9aa9bb83a38cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153439 Malicious code in avminh-afogai-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2fe9e14fb44e35c83ff68e0de5088fe07e3351a5084b4a06e56bf98b04c2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154868 Malicious code in fadila-poke133 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b122dacecc1e3b78fce2efb868a4642a44c50fab41850cb1b2d7ebdd8e82e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159008 Malicious code in mafanfs-matfddu-masan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a762632132428bb29171a78d73fdb06b2879985c191dc5b6472bbff73b20df3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169167 Malicious code in trevora-cir114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2073bb42f22e151b9dc977051068682229b6406d57b7a7b0244ea7eb20d19710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168087 Malicious code in tealove-aruma31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512258556632ce82935edbd468887003043edfcdf046284f835f7b9b523195b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154328 Malicious code in dia-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e056ef0dcd8c4ed54870eea248d0e0027d34d3f28892344edbfc8cb308d24575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167391 Malicious code in teagood-nalikami118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2ee62221a0fafc26fccd4d1cb0b6e612a47eb0dd45f660fb93a67eea15a849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167323 Malicious code in teagood-nakamala57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4976e04980f70f22976b80a02c2da665b429ff31bdb218a662c0e08fcf82e401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector babe48fcefc989db5d5bead361044609698799c441bffe048b24a1fb23a0288f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e41b4a32937d74aeb7f41c6fc1eec985af8c2bd17311ebea29f576710731aae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in man-nonatai-giag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f08dce56fbc66a386c71813cf12fdea2a26805ada9d6f5a44943a088dec0b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6b1e724463960e2eae8ebd02a25b5d6b9ffa0a234d24eb7636434a05e711c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1157a1ee1b8305b6c530fdfab8bd3dea584ce7a51f10f57c7451ebb85d1f0ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirane-asaiggfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fb39025ff9e6bca3a57a5dfd4eec801d2b0b601a97e0715a76f44794649a90d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otatu-umia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67af4b750fa579c71ec775eae83ceb0f2b6291683a6634bf7e0e39a2a1ea5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-umuaiali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fd956b93e8c66c16347f610f5a764127cf12da369afda2ba0f897b868e4fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyia-nikam-luyabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector babccd3b9fd427c3ced182b2b8ce56a2d60500f55ae28655b13676f90be33f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munya-mipta-asd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31866d009f41f1bd165c356409be795693654f917be4830e3fe683c48b33e1d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78887c3607155ce0b6541130c0c99f2367dd7870660c41cf367d012a7f20f6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...