MAL-2025-152191 Malicious code in akanabi-aligafuh-aihmava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c22f4fb706da449b65b56a06dfcaf9b4ce193fa9c96afe90b571e7ce4c59fc2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150895 Malicious code in @miptaa02/ralsazy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed2682c9aba0ec86af7c9e403c24b87ef03d8e8a5434f995e570c5be59e83f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152000 Malicious code in air-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef93e5c787b88a98e35ebca4baada9b6788af46f21a64961273b8fb06deddb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168973 Malicious code in tehah-manatan-konatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650f0397960fb7b823b122e3ba143c0e5537fc3470dac76e3363a91ca87f8d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163386 Malicious code in nokire-rara92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4c7709b3fd03a34f43a249393bbef243abaae6601f009a952d34110e93fece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166751 Malicious code in teaa-reborn8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b31b17ac545e14a60a7f1c7c65fe16a697a8836eb3fe0633c84074f827abc0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159541 Malicious code in manaf-matfddu-masan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38229d5ba6eb0941c4a6e4d8ea42e1a325643f86719c7459dca584d7bc8443ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163810 Malicious code in nudela-ofgfaf-gaagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f69960a0d8060c16487e1013d3df5f3c7f5257221b839ec19e3b23347d472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170299 Malicious code in verify-ain-misuauka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b704799f72efc1a95b36126fb30d76c48e765bf419010a90f497303172ca1c6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163220 Malicious code in nokire-nana64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c476caa79518fbedb5bf2a8ec527392537e0af7fb0dc860c2b6668c2d0bac130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157055 Malicious code in jelek-rasismem-an (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2389382313e502ecc8c7c3aca75728cc6b4b5602bf2af452979e3a24cd33d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160343 Malicious code in messi-tedda-rtaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36739f8829d7bdd89b0785c5989edcf75ca73fcd6c76f43b87bb61728097bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166913 Malicious code in teagood-lokika48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e1ffc492bf6cb7e8b80e2e7475b98257b6ff638358a9fc1f97d800da0931ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166241 Malicious code in sunden-diak-it1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82915ea23e1ffb7d54850d5f0f35ff52ffb6d8d35142161b5429db0dac507528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165629 Malicious code in saku-aimau-umilakoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4410c10df81e444d06860310fb9dfd7cb89a17ab2b7a3747a07d15f745d086b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169156 Malicious code in trevora-cir104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7fa65d7000f250adadcfb6f8710cb082c44bfcc27803299efd6da3a3b492b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152660 Malicious code in andriani-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e48c19b765fa30e9f5168817d9a9e50583fd02df1944c327093ecf87d230b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157027 Malicious code in jele-rasaaya-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7e93ac6bea9cad22247c50a0e035c7f06e19eb0d85067c627b4d0be4c0ccc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166184 Malicious code in suharta-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b654c9126a005d4de8f872edccce1a90c8bfbe590442d3523c1fb61163affa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164700 Malicious code in rino-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4938a981801fbb9fe502551519687324a416774b96d8dc83c85349b04582bdce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...