MAL-2025-169726 Malicious code in uinsnu-lotaihzmi-klsimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e1398b238a51b2fa04ebd74e9259b5a36e8b2e57fc60fecb7428d498b2bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163779 Malicious code in nudela-gagaghagafafh0fhf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d456fc98c08c26e35c5e15fe52da0c2be090471478804c5e9e143610b2a8d409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156892 Malicious code in irashi-2aaa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa50785786d7a9ac75dce36411e59e2242c372de38ff9cfb8eda7336bf42654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150089 Malicious code in @mipta1/kali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f3854f3bea6135bdf1f76bd9068565efb3ebdd825b9b231d9b380722e08a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167623 Malicious code in teagood-nalikoli66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d383b1b9800ab472999af9cce01fe99f8a06daa2d0a9fea3eece1a9d979e7229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gsd-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c932e4632f0a3c042ee8c06416badfc3bb7f80403f3aca6192592d04a88770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155870 Malicious code in ibanuni-otai-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1853c44ac8e62f3face7d54f9988f60c55df04626284af232987e20d5a925ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165550 Malicious code in sabuoaopa-muyafig-budfaiufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc64ab1950d93a41ac83cb8dc8b650019b05ff82484984bd9a702163c9888c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-ali-ipibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97cef7ced91e81cd99e5d0a15d0d7caa4745f6e1b546fbecee52fba5c15760f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167265 Malicious code in teagood-nakama95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4790a4e6b092928c158baf7df4bce004c32b97ebf7c7fea76e161a9719f9c243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164260 Malicious code in piluvaika-kaiu-nubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4593c887f452efc8882bc14bd72e53cda0c4e8000ff703ada703d9222f6a9734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152164 Malicious code in akabia-aligumafi-agoubva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4253ad6bfd812fad6921c793222810f54d7134fe00fe19403e8e6390ed4d9d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166282 Malicious code in sunden-diak-nulikanukn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfb825c49352fdfd7a5a5af5a5abf062fc25680d6b6dbf0fa9b337e77b1b6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-sqlite-centaurus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16783791eda5125cdf43a24b575cda8da3c800a4bbac7fb2e98a57d8475c7841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-cordelia-winston-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b5408d4585ed37f98fcf6fb078ab382491ab854e3e69db0c57fcc3be607c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144819 Malicious code in meissa-ophiuchus-less-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8518a814cafbac1fe3b24bde9c440231a89ec97e3377a71c305e1bb5c795f498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-izar-enceladus-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5b63fbc2117df1a11a114e5aadfed4eb770749bddd0c8d2a0b2c83a7d4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-typeorm-zenobia-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175557d4a655d5cef955077dc02c69a555f4eb2aa05bf6aab5889a1e6289ccbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-metalsmith-cassini-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb8c8766f8543981afe7cd3ab173f90aefcaa4b6b7fbe5fbff2d7b9838cbc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148120 Malicious code in spectron-nextjs-element-ui-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0061303e422dc557f76edb02ddf4add87660df7d1e7b5c1ba2c1410f24e5d69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...