MAL-2025-157875 Malicious code in kupai-lukonta-igavugafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eea8e6720c146cd8b2f62e1bb9b276ca1f79bc1026ff43188d7c0b6182248c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161849 Malicious code in namase-mewek-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af35f9406a856fba9401a23bd7d3bf4a9d63d336bc2d7e510c1c9fd2fe0fb35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160041 Malicious code in manurung-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715acab9ae4d0d0a3aabfd64dfad8aa9c702972b60f5f800c7e4e2f1aaceaabb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159655 Malicious code in manda-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f43948e5069303287184cbe032338dacef2c634bfae4faf5ee24a326db6c531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168100 Malicious code in tealove-aruma43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb33e86fcd42a51356ae19478da434fd5cd4da0bbe0993bf342dd164a6d2b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 476f93f13a822c03b0f885d2864cb68dca592a7799c4bcfd5174edb2c87ab836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-nuys-nabsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05661e134227da33694d86905402d15c2dee8ced9724e57d15013ba2258d7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168995 Malicious code in tehah-miss-br (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a09a93611d5e4e6ef96574356f2e84196488c2f846540f7932a60655201e81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162617 Malicious code in nokire-kilua3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf67d25e00eea7c245b9b053f110a8febf3c7deb5f8a5a85f87db532b4b18df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154428 Malicious code in diago-klop-kalosohaibak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960821f927030181fc6c4eaaac15acbe13d0a19a781ce78f36f86b6003e80994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155930 Malicious code in ican-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fbff21555dc42baddaafaf6daa8b8dc50fb2ae0c8c8c710b518f15b37e17d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168712 Malicious code in tealove-reborn36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d861d4c9b05d209854df53211874e834769dcf49f05fa02de5dde18c8c84b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161905 Malicious code in nasrul-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f432529ab4dc835f3f3e554def519e7ce2eb6744f10595e65d8f272f791e8bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe538ae77127532d89fd1856256c5735970292bc6184a671f161a45d2c1317e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167001 Malicious code in teagood-lokina37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cc8167ec09f9e86ea80259553fa8c4b9a789e3178e772cb21da9fcdd814137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiari-agutbolai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 340f58587a8c802d81519354d69011d6f010fd2499d1bd69659c37cbf540e54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149956 Malicious code in @mipta1/asfafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9141d94fc66d6f0a83a6f8550f634821c20440597a5a12e147ffc9da25e81a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2447eb4b14c2e7978fb2df577e381c0f96c900ab72bc84b58e580a6beb81c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156733 Malicious code in inufi-gfobai-jmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8064a6410ebf249f1d37bea935e2db7208d558d4c051b10b2312b468b8ce1263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165639 Malicious code in saku-aiu-ian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec67e49840d7ffc56541bf13dd3c5be45e73dd82a496c29693ac4c1d5b679c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...