MAL-2025-163412 Malicious code in nokire-sekiya24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67046e096ba23b6935ae4df9ca0c2a9a0eb01f20286ce2ee5f6147087590cef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161715 Malicious code in nacho-bun-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19bd1e5dd81dbc9bc593f86b55385c0b8a770776a7c366fdcf62364ef4bc03d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154328 Malicious code in dia-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e056ef0dcd8c4ed54870eea248d0e0027d34d3f28892344edbfc8cb308d24575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152061 Malicious code in aji-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e788f00508964c9f5272d9ca90273d10efff4a1be6506c33017de0e9e044d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166921 Malicious code in teagood-lokika55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c910cf0548ae23248a5c07d88395f4e4225c36e42e30c115d6cafb77de9af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166142 Malicious code in suharta-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45da3f9ac5e03557462eca9fed58c590e4f612a3333ee984b0709f49b1d884ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153864 Malicious code in bitha-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0177595889862c5c177a67a4ff473414e3fb403b86ccbf30404f8a903da6125c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160421 Malicious code in milaoa-dudio-nsastuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc521ce502d8cd92683d3124e27792831156421118f88df1279a4af6b186688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154338 Malicious code in dia-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f081bfff41ccf89ee951fafe636555c3e86c6c719cf6ace4ed90c41564145822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161268 Malicious code in nabila-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b875a15022be94142501a10ce663ad04fbd6dafde65e824dce5ec5e8d76cbcb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161849 Malicious code in namase-mewek-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af35f9406a856fba9401a23bd7d3bf4a9d63d336bc2d7e510c1c9fd2fe0fb35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162673 Malicious code in nokire-kilua8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5336b0ee6d0c69931cfb0fbb597b9f45d18a9fc0d6349335ef93a147f6e5c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165582 Malicious code in saku-ai-ups02iek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa26902cbb658a903517e988b1df8d22f33e16533c9c98d4b6570808484f9b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152056 Malicious code in aji-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d16107341bfc5656c1cfa808328a74267edf7dca8db3a69daecaeb187194436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164729 Malicious code in rino-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe19b42dee89c876b8d299f6694aafda05151f80e1f085389221e508f1aadfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160565 Malicious code in mirai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c534b9f9fcd038cd21e2a77eecb8fc104f8ab26fd0df8cbffa2232bd4be7cdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b38f76c71542b66142a48150b6e2a3c0a45953a373902b197e231d2eb1a10c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gr-nutr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dbc195bc1405e4bac620decabb079bd1dbba43bce25f06d0c8ebc48094ebd80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1542d540aa577eb94861b70130fba41c0a866e24ac1c88fbcfcb7a42ab1678c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e290516144637dd9cf0f307f53c041cf5b7666ca641650d06c90ead7d1246b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...