MAL-2025-168271 Malicious code in tealove-darknest16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde416349df494721ee22116f80ef148c248620a6c14cec7b111fb2c92458dfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150554 Malicious code in @miptaa02/bount (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39df34cb47a4cc317573190ae078baa3e841cda41f451c1fc85cd3cc8a461e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152773 Malicious code in arif-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425d62c2fe93005aba711c27f189388e923663ac5612acf61c08578432e08530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152006 Malicious code in air-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91e21cabeb508ef4dfacb2bf4856ee698d6d0f0e8806106a3c5e0dfc3c8c209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169471 Malicious code in uafarug-mifi-sut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a759240238a0ab5912c86f6029b2a1629a604d659b46ff528feb3e150fc53963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156045 Malicious code in icha-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6ba20ac558173972dde038737c1e170a98c041ea4d66732995c10df1247e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150372 Malicious code in @mipta19/gff-gs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259e3bfda0da3c6bafe676cb37cb8ac29aea815321649339e32e94a3ca5dc8a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150840 Malicious code in @miptaa02/misra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214a37ad3ed6000d671e26aef2cf69e01d7dc3f90fe27edc5e7ed1d3e4655524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150689 Malicious code in @miptaa02/gfozsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa184be970060ffb77903c0f1454a0f71f3db08879ad2720b54df62962e623df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160617 Malicious code in modirai-fuhopia-janitabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a356d5aa11548fe51009d99b7e47bd5ace345b9043601d7ef47aa502ed309d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159646 Malicious code in manda-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f6d043da5c01e5fe704524d2a74bc731bf8c944bc0ed0035dc9cfc355349d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160333 Malicious code in messi-oip-tungg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965e93c75d941255bc02fed3c7e69893aa25f797aa1620e28303f11e2d3b9528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150392 Malicious code in @mipta19/p5sa1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593dd6e79b32a87d12fa14df8e5fd630f3e00604cdb4892b444c277bd1d9d455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167849 Malicious code in teagood-sukuna90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6347bd2e8f1ea239adc023613607cba7923e08f04c05e740ccd014fa4526ac9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152755 Malicious code in arif-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af34024b34fbf300374d9ba0d94ca7a568a8289993b0c3a80b42063a2551b7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165830 Malicious code in shilang-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0459648054322e1e7e43f44b4db7520db5ae9fecbcec3d4760a418c5e5769218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157007 Malicious code in jeep-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ddc983769eefb438f9559056140c73efd21a88525cf0cc4c201333e416cba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153254 Malicious code in avminah-fagnimas-ofisugogafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97e287ab46b5271854926aa69d402b7bcc7024729f974539820d4616f6591e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159989 Malicious code in manud-nofty-muatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57972a37eec9415c9942b2c4971629cede47587efa7bfc588527334caa3d632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150853 Malicious code in @miptaa02/mura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5150ddae4a6b14b717f2ee16b2fa91dbed884418607fba17996bdeb3eb5be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...