MAL-2025-158386 Malicious code in lookingan-nakomi28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640eb5d4b6898355e5cc4809ecbd0d287ac86795b0ccc29212786429d3e389d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153334 Malicious code in avminh-afai-fauofaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d764ed7f10ce569873834ae4e66377a1290ce59c6fde98b262b205ed6a5701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154495 Malicious code in diago-kulp-kabologi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5f788889649ad9aa91a754942ab3f30d1ea31296ece169da4a224c6193f86c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169688 Malicious code in ucok-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2178c5b7a449ade9eaa5cfa930ef4d8f531936749e6ee03232dc89aec41b53c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157649 Malicious code in keyla-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d17f4066fb117d778e49d43e46844abec3a35807d4356bb7e4a154cf038e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150857 Malicious code in @miptaa02/nda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e169020143720ac074c55a1a88ce9415322048fb839f52d2878d6e9d6f95107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160460 Malicious code in mipta190-mean-cent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa4e938ff5968c85b1d1125248ecbe81091c85274dd9aa91d34615d00b65fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150895 Malicious code in @miptaa02/ralsazy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed2682c9aba0ec86af7c9e403c24b87ef03d8e8a5434f995e570c5be59e83f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156781 Malicious code in iomodra-foruai-aunai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b32d31e981c1f83c47ce2fb85b69a1458614ef995e766804565278cc9ae430a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150968 Malicious code in @miptaa02/teaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d51bd8a8accbf2de5329b5a397039f39e17744a12485cf50c4ecce0dcf55286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163932 Malicious code in oalgo-kilasolai-akiamako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f4b9670e5eae6e9b4118d74d79f5802dca9b91c4fe4ac794cfa6fdbb9d29890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157013 Malicious code in jeep-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 880b5f3efef72a1004dab0b4af7eaaa05fbc20902ad491746430e9f3a0a7f122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161509 Malicious code in nabuf-otin-agogoasdai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed16a4ec64d84b8befe06ff33e3fc5488a2ba8d124b2e8f2424535f27b54436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162981 Malicious code in nokire-nakala29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd414a5b2af1b97487a223ffe40a54fa1701c3745cddfa5c1cd35a0532ed8dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166293 Malicious code in sunden-diak-vamikam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d819e9d5dd696781aee358d11e893f9a92ae6c6d58634c6a49e137e322560415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160090 Malicious code in manurung-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02b007f69311befb9c41dc63306fedc3391ae8abe7638f3326657e85fbdafdb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163279 Malicious code in nokire-nanali27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9435796ea1e1a1abee29fb568e7a4b2dfec32a57f9553767400fe080cf07646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151876 Malicious code in aiboa-moloipe-asiaoaminu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7141aa9738e40c07adfaf4ea73c43f3544d8105c8f7b04ef0860dd8759505ea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169827 Malicious code in uinsu-lisa-amudakinab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbe69ee990c1d5ab4d0261cc19188298227584b62cf9d18fd8ee369812a0516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151870 Malicious code in aiboa-moloipe-agigsaipanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03503cc16f0c8450883689fb285febb4a8af187eb7e9b0fc27b1d505000789b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...