MAL-2025-156073 Malicious code in icha-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ae95005f7da448312efb9d977bab304f3428bfc92826a0e539bc92f3552003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163183 Malicious code in nokire-nana30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de1d930e4172b58b8aee7a8dc5efe8aad84cc2032dc324bb7addebbcd4359c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154689 Malicious code in dioago-kamoi-alasiasaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6b2ca3593afdc675467760668948c1ca4cff1520ed390e34eaf10b81acb7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167300 Malicious code in teagood-nakamala36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9174fb1374b2aaeb0766ca855a888c185fb7eae9c2aed20e219719efa01ed61b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164525 Malicious code in prayoga-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defdced9386d2c9b85d911ded727103cee918b553c45500871f879d06e2c0617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154104 Malicious code in cinta-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d799d3819601649451e5a3121671b4c1991201dfea9283ab4f76d1747bdf010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153286 Malicious code in avminh-afaais-figufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f602d230f8ecd9220369efc7fe72042ab296c3512eaa99218d8ce3b8a8cf01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163936 Malicious code in oalgo-kiulasonlai-akiavabuiamako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d359563ccdd0bcc3a27e35c87d914237a4cd372647353f4ecebd5f84014726d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150452 Malicious code in @mipta19/u-gffs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3594707643940f72fa6edd909c778f0690305c8d1311101eb27a406e1e642a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158698 Malicious code in lookingan-namakita82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f844bb0a38a08c595ef3186b6017f1483d3e2a1f62482629b78a7b4c2c932d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161125 Malicious code in mutdaufs-marimasa-deadly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98de013311c541e3ce8d44a7f61a61cec7bbb864ad0a0a12d1aa88ff6f21687b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155725 Malicious code in hariyono-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385675710dde9d5a43a1a5432a83a27dab52db2d7b97be6468bb2ef0c85aafe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157095 Malicious code in jimmy-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab960ca3aeedc2b2b2fa221be8b075fa8e8357718d7b3fa447ac18f14ecc7065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotimi-knubasilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ace2b4a2e97299aedf4a7255c3c04a69b65cec0a8371676a62466c1c6798821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e939f65130fd402b50f9d84871663a1302c381ac2b4d9f7a2b5f788a28741ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/realsazy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd44259bdc30a8e35ff2aa716820e00c425f218358814e86bc6af7d98ab0ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022ece19959eada863cea799275f45fb03cdee7714d769ebf725d04b8b5940a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afati-uru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87550222795118e3364ebacdba3325e76fb0a8c5df5fb6b68da9ab8ae798c298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45b753ded55ad2dd813d0e945b00e934353ce65a7d28b1874cb5abff1948185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nacho-bunian-juni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a2ddc40ceb597574114f8b882eeadd2ba24cf1b39dcf2e2db5915012e5cb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...