MAL-2025-164207 Malicious code in pilka-luniu-kanukuaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84b310b6026a10ea67b4d4573931848dc4606643f71acfd235541392f5a46dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150874 Malicious code in @miptaa02/nyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a9827e9709f4403fb6cc46ae29c538de2030fcad5f51d1f7c6ea0cfb00f515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166516 Malicious code in syahlan-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0a35d76bc303ac96f08655899e6c912bbc97eeb68132cf96b3f666676fd4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167274 Malicious code in teagood-nakamala12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d565bee875091dd9d056054670b1bce3f7e61c8748751c5505c95080973cffcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156397 Malicious code in inal-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f204afefab9bbbd67e47eea007b06b57f5371cf560b1e9563b3e9bd21fb00033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159226 Malicious code in makan-aiuga-uyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f5010e42c1a545a16f7b41a33d69d485ee8d831f9db1589c98fa1bd1274045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169161 Malicious code in trevora-cir109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd8bcce55c45303102713537500a77e3a476da087bff5c12e3302ccdd72ba21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164994 Malicious code in rival-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c863d8caacb8bff573f4727d4fecfc0b4140b8d4e6a33da7ef005e9adcb3ce48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164656 Malicious code in rino-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64176cbf90ccd7f8a67b389b924a00fed1e4d40b431eac56d362ec5287a9681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150826 Malicious code in @miptaa02/miasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045904585d2da9c118a652a5b3eaaff12232d5485036441291887f7886a6a48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166870 Malicious code in teagood-lokika1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c5dda11582b6ec4eb2dc6ac8999c0ca58e460ea00a7400cf29b50032e2fb79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155966 Malicious code in ican-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350b5aafcf11565a6af83b8c6460fb4a08217551a60fb1af97bdd21788f7458f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160374 Malicious code in messi-tursasah-tungg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff1b51e800a88c8c0ea02af53f6312c4178da658b03eee3ce152331d61583a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170159 Malicious code in upilkianula-lukuzili-ilakzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df40fe4e959e303ba8e0098fd97dd885d99fd686d76e2e11671a498374c3c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158242 Malicious code in lintang-tea79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726fec97d7bc28a64ab6c25b81eff246dac6d018f75ab884c1c4c18d17430104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152300 Malicious code in alfiansyah-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b981c83a6fd5cce64a64513577a657bd4c62ae2e046cb9095ae9a0982e86e959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169564 Malicious code in uaragifa-maranfu-safarai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594d8479014e9d6608d12512aec57f6c6958d84ac1569e3d8d10698403292dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151700 Malicious code in aciaiaggu-idat-gfada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d74d306962df7e169c02ec92a35be8f6cb9dff3e92350c248ae4b3de0c51a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151302 Malicious code in abibua-mobn-arta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3384287e82fc93b58d6c73df25376e30dd1d13af84aeae80aeb22da7f4a9cdf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164941 Malicious code in rita-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34fefbaa7811c72b6b9309bbba2a49c97850e11197152ecf7ad643b0770971a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...