MAL-2025-156952 Malicious code in ita-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4688caeb725ccf23f9f2f3d510df09d3772fffccd8887f0d40f1c7772c5b2a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150026 Malicious code in @mipta1/gfdudgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc4634611c21dab150c1937b29ad251c0301f11f4f070895ddd5967378481bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154223 Malicious code in dajouka-tfsfcdd-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee0e4cac6f09be231f160aa4ccdcd2a1d1e6a5fc0bc8bff262bc89f1cc2a279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166439 Malicious code in sunderlan-udk-vaukli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ace2420c58da71bcbe5f14bc521c0e2825f9f30bce8fdceea33833d86195dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153697 Malicious code in billa-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a21edbe52e12f9452a2ab2c2e4576ea38cfdb2cfb5243519e715e3635200c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165831 Malicious code in shilang-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2b913a7f81c48974b1aa9075d8fc1a34d8a23b3a6d94102d9fc3a83117f1f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159399 Malicious code in manadsi-scdor-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84e2dbc9fc09832822946e28b80dd9d434ed356cc91f540309c1a71cbf4788d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161421 Malicious code in nabuf-otginaaf-dofpohojau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8c5e6d3a7c14dc62c81314054c8531f17cfef87ac1038861a8f6b61437dc62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159394 Malicious code in manadsi-scadador-nasisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1e11b4669051561710866c40bc3a9c9f85115940d51df5f985ea6ce5d73ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161819 Malicious code in namasae-naiua-somaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61336e40fa26f0dc2c7a58edd4ecc88494a3ef564e60f0324675f6eecfd3c207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168497 Malicious code in tealove-nice2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31a4a08021dc2c5c793a28c8abe2550cb57520cf911922055def19153a2cb218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162327 Malicious code in nokire-arhani17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e134c5c9c93d847d1781e53711bff70c6c1e64bd521dd579e5c8bf84d10e41ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155346 Malicious code in goodmanmax9250-strange-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f15b103b79b0dd7fb98f8361d4bad68091eb22e7e0c760a68ace301860a83d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162597 Malicious code in nokire-kilua11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d7f10912d5cf4e3b902b238d7064eec0c3fc2b6c9bc478478c2fc391ddc54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167131 Malicious code in teagood-manaki63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f27e67bc4f617180e5e61b9a4fb71dee6e0683a2e8c333e31ae6596edf21d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156428 Malicious code in inal-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316654e98d36420ab13233cf36a7a4cec1560b91aa09cc512dde1c7f89f079ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151063 Malicious code in abang-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1771a00d8395cea802460df4c23754fbf7a260673133f3d950d8733e8f5f8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153460 Malicious code in avminsah-afiigafmgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3dce2a165a1d92c913e6dc6bf13b223e04c17f5854425f5e439c6edef30c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165020 Malicious code in rival-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ec54c14dce5c425a195ddee454edde81c2afe1f460dd4e8e13fd7e1dd889d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166035 Malicious code in slamet-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6144b7bf82828df8418e46c86b0c8dd2fcf0284dca0a01044d5c520242f589ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...