MAL-2025-157358 Malicious code in kamasada-nutai-kyased (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a629937fecdac8487bc8f413a3331ddb6ecc5b2ef06bef59820a7c52b6c83d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156469 Malicious code in inal-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54fa8586b100e939c236722ce70cd8ef4405a6c8c30e7d32f79a2dc5bf5b4d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166994 Malicious code in teagood-lokina30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83873d26b28c17ab5faf8c024548a7c3365d9641ffb2d0cf5fb2ab9d7a199a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162402 Malicious code in nokire-arhani85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d267eda4842bc0b185608fa0518048dd74fc5d220711aa58203831f2ee30d7c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166089 Malicious code in slamet-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3640d16fd7317ee3b5bb954d03abcaf24bcb1833ab4420308e4aea634603da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169652 Malicious code in ucok-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7461d16651442411e884d15aa547e9be793a270fa4ac5f7c3c90af7d06909b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156750 Malicious code in inufi-gobali-jagruan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5290539e052ab44b7de4f39ee63f3167eb7eaff338d77e20420a7c699e1f08cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166535 Malicious code in syahlan-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2abbc39539f37fde0447fe43155b7accfc594b70f52896ae43776285c582de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166634 Malicious code in syahmuda-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1041c7befa8b306323aa14aeb658221bc569b8de600db556163397d5bd54a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166981 Malicious code in teagood-lokina19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d395ab37fe24af4e7dcb081f4a7b58897df170ff03cd0e6363adbd327e60f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169465 Malicious code in uafaru-tuamat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ef082721b0da5c098f12b4b40a69cc03c713625c7d48d6478f1d5a2a61e769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167072 Malicious code in teagood-manaki100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520759cd423bb98840de1c99a8433398f3a8f4ba6128ce04748739834f07de57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152621 Malicious code in analsia-akifai-asuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1d6e95272ba7705bad246aaa0f7e3d4551e7da6b3cc486eb0618d18957c43c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-alufuai-ayavauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749b187a973ef228b4d9bd3434bd2d48319e5537a0cc2bc003437bb11f9497ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142430 Malicious code in favourite-coffee-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9ca0e2b4bc589d1779f36ab439cb7a963d9e4ffdccc1e2402235e183ddd9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-sync-procyon-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434d4b6bbcde4dcf7e4fa46ea40212da7acbc15f97dd7d0c59b9c7366c8048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-algol-ganymede-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c303cf7884f70151ed9e6b5bf9c2c7e507450c13a216a7ce95ae230cb4f238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-fornax-ini-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635fe853f926b64f3ffe8ed1be352a1c5361633308b5d473efc4932804483edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-lyra-arcturus-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116f0653ba576b64db957b8616b378786fdbf0a14b176d898cbbe3bc05bb2e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-quark-charon-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2791fdb726654cfab79699ec9ea9331cf5f86011d5e2d08bda7ac54d9a50486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...