MAL-2025-157906 Malicious code in kupai-ukuta-jokabiokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d70352a6a5dd69504c52214ec9aac1709f35d93fc4bf08c9da02f2af55b5058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168915 Malicious code in technical-aloni-tola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153be9d8dc3fc93bc9ef10cecbe0649e4e1a2730a793fe612078e117dd55aeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169358 Malicious code in tusaasya-1-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4a97c26a657bf603e2001b24371e65355fe5dff7cc101b82e4c390064bfa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155152 Malicious code in fitra-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684db3c8166f25d59f216bf90aacb728481dcdb608fa8faf37e756986ecb236f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169238 Malicious code in trevora-cir43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8e0119820105aed19aa036174fe9a43328068b04e5e52d63913e30a6079433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158524 Malicious code in lookingan-namakiki16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b6d50ff37375b2aa80fff5006c99ad0efe8a24e941b7835702effd3fd2c8dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154618 Malicious code in dian-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5710b9cfe6b238ff98d411409e21525aa2625913f6a56ee9a0be2b46be4dd64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167289 Malicious code in teagood-nakamala26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ca1fd4112bb67b15b51fdc62d5cf380e5c9d2420939ff99574fe2e501b38e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150075 Malicious code in @mipta1/iynujgmg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a241596e732d8b4abb95ec16857b39729dd7889dd08372bfbe7d372fd762e35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165808 Malicious code in savion-tusa-ise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1effe4697e5beb0766db0da6a8093a5da3bea90d8af3e28809bd673b91d2d857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160233 Malicious code in mattu-miotboip-nuyadrat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d05ca0ac03dce5157e92e8215dee8ca7f250172ce9ae435a8593739589ca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162688 Malicious code in nokire-kilua93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d072bda9770cfe40c39a920a3c227018b1c510c25df0077ba974396a5c6a574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165999 Malicious code in siregar-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7707fa4f0cb4939e7eb48dd8a026eccd62d3cc5cb5ba1557c4f4600b2f2f401a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165109 Malicious code in riyanto-125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41331819d77d21b41348373b17b8f14b8a2875985fa0e7531fac9ce552d26c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150436 Malicious code in @mipta19/scseh-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5fe4529b958763dfa618e1250e6c65ea053c25555882e67c812f1b5c14d969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149990 Malicious code in @mipta1/dsdssf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2bcaa870d1533998f971c9901f70d3d9d2df6a0db8c33d44c34475e7875ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169570 Malicious code in uaragifa-mdifafa-sayugauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89f86e84b6427a857ef8857f1464c90c590e45fa8a8838488197eebf1bf0985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152448 Malicious code in alvira-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c04ce2fcb4cc8486dace9f2551edc9f4e443482b9315e119e9628b489621b6c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163968 Malicious code in parwo-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd9829c0b774bca9baa8249e3fc7c41e91454ae0fea91f91111fc6f3d75d852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165054 Malicious code in rival-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f10fcb966718d85921e30d2a9667716e45fb364deb11fb0e280e44b5446e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...