MAL-2025-151317 Malicious code in abih-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe2314da1fa11f4c55e686e2e7f548143c8b2c30ee8f8d87faff94f061de0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161024 Malicious code in musasik-nuts-bun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18656777c43ecf87d4fec87c1be10963978ef2a21b3e87bf7544dbf3aef570cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153171 Malicious code in avminah-fagmaas-adiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55494eb473d6840cd4f35aaa592f7f5c8a00dc60a2f7b5648b31a045250a019b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156346 Malicious code in inagi-vumaf-nagafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795d3057af2228ac9e20ad7f5b50d5eeb58716e75966f13009634b02024bfcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155329 Malicious code in goodmanmax9250-calm-think (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829085675098119c01dc98a5adfe838bd320dfa8345952fea980bdf7dbb8008b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162336 Malicious code in nokire-arhani25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c61d310d2d65ea8ce9a8d629eafc132b20137d5230bbe7ed2c07e4bea1eccee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162296 Malicious code in nokire-akaza8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee413d710ef8ff5841eef722d857d42a482f118a7149aafbc86392cc00e0a44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167103 Malicious code in teagood-manaki38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336a47b0039602962610a5afed60208496d9999133eb1661baad0cb976189fa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166991 Malicious code in teagood-lokina28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b02c5d4c7a27574659fdf669aa2a976b9684108e8d998e432e1884a5b30f4b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150951 Malicious code in @miptaa02/ssai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef1ae87780ebe68cf9cc92ebed79ddb4ea7f240d968f6dd6a6fddcaf1e889a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150792 Malicious code in @miptaa02/kkbd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ff679004bf780cb290f83a35d128023e14f66c8bde405f67865d7436937536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156604 Malicious code in inufgi-goa-jamufga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bb590c7f56d95424775199c598f481d957c2bd69e7456982aba808ec0ba832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152360 Malicious code in alita-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b6f3646f839ee440e91346aa3532d34c8881c7f44c8ecb23b07572267b08c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156951 Malicious code in ita-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0316b058b15953c0a06ffb852edfaf28f8716dcdfa284762a272eaed2612e197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165879 Malicious code in shilang-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1021d19030761c915ab15a6177000a4d5547b3d27961a268d49bbe4d86b98d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150379 Malicious code in @mipta19/gupusr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2f12e176a31c9808dc051dfbb50e93f704d4bf0930207677cfa064951d1881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169837 Malicious code in uinsu-lisa-atuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb4fa8286024d5a1b1eb919dc7a19985a4793b3da907f858fadaf4233281d30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166041 Malicious code in slamet-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec9e1b8bd33a5a021f8330597be749e6c9f4933c99c46a96dea8a06332e63eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168156 Malicious code in tealove-boy48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86906230cee14a2135df51d8145942cc589ed3a10a3352494b8e18a2e481a47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167955 Malicious code in teagood-yakuna91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8005ae2e548f21d42fd9cd901c6f2cbdc6d1935c984958b04d6ad9a98fd52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...