MAL-2025-157422 Malicious code in kapafovgipfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cae31d8b18b19e195baf3fe3bd2b06e5e759f065feb200f9e6c1ee4ad575ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159389 Malicious code in manadsi-safifda-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012cc6e252390deec94c167ce6ee68829ad7a8c9d52b556771b98c5239e760ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154954 Malicious code in fadila-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a710fa048e52aeda888da7f3ee87173e3c49e3eeae53b889238b881aa1330d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169680 Malicious code in ucok-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd16ca115c9597e27267d50f94ec682614a55ac065e9dcd0dc09bf98ebe3f563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158974 Malicious code in madan-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e475059db0228730b93fbe8ea17cb3b2319ff5d339b51d177e839ef5bd7102d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160987 Malicious code in murai-burt-reat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949569d1bbfd8ad4fe81cc7eab237deb192c02b46cfc3fd6dd74766ccd84e9e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151763 Malicious code in aciyua-idusut-daju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97272ee7446f7323e5eb4ffdc40a954f6c69e23295574b990ff0b028576f371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150780 Malicious code in @miptaa02/jiss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6683079957b8081b4e94f912fcd4b8fe6bc570d15639ee6c219965e837956828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159477 Malicious code in manadsi-soradid-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577cfaee21deb33aedc308a92d901f1f411b7869c81fb51e946d1708f485f812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151623 Malicious code in abuni-nikaia-luahuubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa50858d7a2ff9fe0ba9fe0c62ea4f49d343c4c7415a312b4a6308394e6d0f83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152424 Malicious code in alvino-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98bddafb19ca1cc7607446f151f78f0dcbbbdb3381e57bc36ba9358597e67def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161097 Malicious code in mutaus-mansis-nutayirop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b75cfc197b777b242250e6bf9aaab9fa59ad2dcaa6984aa7942e9d788349f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168375 Malicious code in tealove-naiman36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93d81901c292cbcec78843ad8b166aba2e70458d547ce496ebc6fcc3757f16d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155301 Malicious code in gifa-ota-uofo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5b9cbda97b841e81066c7f7eae4517cfaeb6fe108309a5f616fa5e10e2cbc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151789 Malicious code in aiboa-milipe-apamumipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb43fad64e2e5f5bbff016db7400174cb2a23a8682ba0389d0710da2bd0315c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158665 Malicious code in lookingan-namakita53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30509c490e8f2112b57eca8930e160c2af0ed7ed1a7defbfd88f77785ed2e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169956 Malicious code in uinsu-lot-babiam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10e398bf8ed1b57ea886aa3430f536ff13c0780295a3d5118b216dcf320f24c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168867 Malicious code in technical-alin-tubl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e531074a7a6323e9c952cc78660460dd995e26ea643d084a6f702760a34b8c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153711 Malicious code in billa-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b483d67d5ea61c28e23b19bf1653a65b68cfd617ea0dfb894516c7f3a53a173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157077 Malicious code in jimmy-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9895b7fb3302d754c54cfb6f7d33b3f6153ff9190bd6a6fb49cbf63d74085862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...