MAL-2025-151474 Malicious code in abiuba-avimun-abupuvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27c87610c9fb3a96ce1f508fe252de91efb821848d204b6ecfc2ddb38f2fa0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157682 Malicious code in kuinsnu-lki-kagbdsasoasddgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ab530a028e928e066eca36fbc41dbb221a098806514f5d12994aee0b2ac454d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed08f3494f589dc6e4893163fe2dec5a171b3961829146c787f1a1db8377a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15addd26fbe44b17cfeb5add49064130103edaf44b92a021f0617261a7f97c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169867 Malicious code in uinsu-losiat-diak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e60c195496717d702ae857f831ac6dd35547b9d56943bc94b9e9667f13060a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156696 Malicious code in inufgi-gotuma-anz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e16394583edb5288b946b5d00fc81bbda4a76f168e7944044d9965593d02924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165858 Malicious code in shilang-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaac02fa7694dc286458195420afc77eb7b2e0918744bda3c37c8c744ce0d1b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170257 Malicious code in verify-ai-aiusamakii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed827db18f14172d62f149bf1c59b87e1f60fe47f71065afc8dabf5a9cc8bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee0243d094c2a1acbe61e67dee6d0d467bb4c639cd7994b287241fd70c433c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155530 Malicious code in gurs-mip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a8e0a18e7ef3ac2e08eba8134db543b6db6d8fa80e76c196bccfe208fe3bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160820 Malicious code in muklis-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4737aa42377f8a77f936f9b639174e449d29eab5926e8a4de24e426f0a4ebf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157773 Malicious code in kuinsu-lukoi-kinatmuomolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfd77b28e23bd0b58724bec8f9c105257c3fb444b4527ef26be48775c1368ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169498 Malicious code in uaragifa-afaoti-urufuafayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997cc60a982312af3cbd2799f24415b668c9870fe7208005f8d1e00d7588892f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167413 Malicious code in teagood-nalikami16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1497701c29ee8a90337719138410af2c4e5778f6b106f9e11f892fb2120256b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-canopus-kronos-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ade41d63c7f9d1622391ff19a184cc9d7b30bf4422aa034da1f374435842c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-betelgeuse-perseus-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af856ce8424780e448bc2e4ae72c9e125282095bea8380baf39f32da29543d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-nodejs-nextjs-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8488e7f3eb1b0a423523519eca85887ecd6c04e408dbec4c05e2e936659200fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149383 Malicious code in webdriverio-sails-perseus-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f54d6d3405988939147e15ad93363602512ac312efbbdb733e39a2f217639f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-jwt-lacerta-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef56c704920dd44671d3c0efe77e25cf3249240f4fe7d77f265fe02e8a816a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140159 Malicious code in buffer-hapi-rigel-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234a847915fb916fc1124bffbe53d55bdd12c690cd1d599a343da90e19e60111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...