MAL-2025-163924 Malicious code in nutr-ndutyuai-mutriao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dde2508cd36750bd08f4c10aa03faeab415c5616e4063be0add884dc4c84d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77d684a944c387bd212886d3ad5a8ddc09ed74bf10dbc9c1a4c697af3481a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167643 Malicious code in teagood-nalikoli84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7349e164c3fa5379cbcd6e9215a823e9b8fcd4bfd66e150e2e267f386702d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150920 Malicious code in @miptaa02/rimyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11dccae47118aefffc26327978cafb5db8018825e73cf3e3753abdbd4dd98b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164586 Malicious code in putri-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17190d07a37bae36fadd3ce0a2ded6d375f2e1098b4c92109ee12e81215e01ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169168 Malicious code in trevora-cir115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fd502da3b5069623d87ec6e390fd796beb8185ecd365496aac0b5ad2e97912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155310 Malicious code in gifa-otatu-umri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dda1436aa9dcf95c3c751f5ac6b7c01e2cc401bd08a4fa025b2321b919a5d16e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-infgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5cb3649236c5c49767b2d0a2e7f76bd0b2a77e7b7e364a7250ae83144a88b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157518 Malicious code in kentung-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532bfb26621d7810f331372311b1991dfbc66428059d27feb1ecd42d383d5288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162590 Malicious code in nokire-genji96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04f91b96c0ba28d0ee2215394177cf64c732e778644aa090eb8af8c67460407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152225 Malicious code in alfiansyah-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87986dac97fa3504d4de76a934fa4d8f80ba4f78d23e82fd0c7ed90a295da85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163477 Malicious code in nokire-sekiya83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0480c483d0f421ca07f6153672ecf60ed2798ef1fefa91354da233522c4aac33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/oadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94b77db3b6041f9cb47eecea32ab707fbdac1f3e5fa2955836e582a948e45deb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155232 Malicious code in fitrok-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f000f22826a9ca8f3258c89cbbe5544f12108a90e9c3c945c16d8852f207fb0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157047 Malicious code in jelek-rasi-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319d41ccc179bc638047c2c8435e55ec94285269461fcbfaf2c7e201c99e5c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163958 Malicious code in parwo-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bafc27ab61c9940d3e44f97aca7647140896a4cb9b3e52d75dbe01010b157c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163858 Malicious code in nuilav-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c32d629d1b2198db628578e4495f44fd9cb1f7d49c7e5a9f1ce481335d0cf274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162469 Malicious code in nokire-arjuna55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede07c2b467c846c871c3228a53957df2f677436a16fcfc1c23abc7551b8735e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167860 Malicious code in teagood-yakuna10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd369dd51da646238253bdee6888d9aa9c805ba887c706417a684bf73a24694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgaf-dfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684b7e9c0ea4217974295ebbc57d6943866e3a98e314df6881052b7d1eb4cd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...