MAL-2025-154895 Malicious code in fadila-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394706f0041bfedf05f24bd9526c5581590b3ceb6af378d3e8c0be9c59ce30bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165756 Malicious code in sau-nai-iuyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb782078474374905ec834bfc162e4205cbdfd15f7595208875baefe059e59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158968 Malicious code in madan-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab0b679b0cb9d3f04bb44d65e1f528c7a531f3c43c83eed31ad8d1710d2a6f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159294 Malicious code in manadasi-scidor-nassop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434f75ebf69ddedf0b31847c0fff01776d6365107861819c413874e60ff18b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162332 Malicious code in nokire-arhani21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0802808f896fcbc34ab3e5ff3a11c2c71b9e2c654149983492823cca12aa1c04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152128 Malicious code in akabi-alfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b436be90fe76176f870a282484dcc7be9924aa6dcf9385351855834214227f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158039 Malicious code in layla-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddddb11d93efd3c205405c2dc0b621ea497028b98d8d56cd781e4698ee7dd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156004 Malicious code in icha-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0af3e0669a7f930e270b69f4af0621c8e3e309816b6e512e523c119cb48c80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155102 Malicious code in fitra-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fab0462695ab6adda6a02a591e83420c06e6e9418d2ec3c149d771805e884ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166470 Malicious code in sunderlan-uylud-vamuiubknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d487a31f6db107c438f02d84dfb9c1cf0394e80decdb786c5734b63a044738e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151870 Malicious code in aiboa-moloipe-agigsaipanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03503cc16f0c8450883689fb285febb4a8af187eb7e9b0fc27b1d505000789b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160660 Malicious code in modirai-igmno-jianamagugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9abe016709d98d7bf16a058bad7e54d6f82e61203e9ee029b69db641fffe276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166476 Malicious code in sunderlan-uyud-vamknaiunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9796edb3e39af1aad516a7b855c32e9d4110fa6ec9b4bf7427cc103e69a8d33e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149985 Malicious code in @mipta1/dicax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d3edc15dbfc3d3de81b55e969e727c00b96d6b42f7c6e27525812d111c57c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155734 Malicious code in hariyono-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf468dc40bd834be57983c34cb89676de187e42fb008b64de0e9e44cb4bb192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167427 Malicious code in teagood-nalikami29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6830eeaab791eeca332b72544c4fdd0165e0423185324a51ebdecabc9cd43c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167205 Malicious code in teagood-nakama40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c56eacd53dd7472169ece15cc53a9a9c3eab39241987885219ba34f4eb58778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150300 Malicious code in @mipta1/uysia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4db73e979bb2679b1d4cdb0cdeeb36c01c1a4d37ec4be3312877222e7b15ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150264 Malicious code in @mipta1/tdadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f250618d5a197db7c4fd7fe8d04f064d02bc42063c3d0f35e56e7fa336d0f781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153667 Malicious code in billa-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0effad2f987d2dd979190eb51ac8626c1334f89cab347a0a2e6774d10313bdb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...