MAL-2025-163719 Malicious code in nudela-af-gaafodfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edee3c364c3b8b3148a18ca457cdbb19d9855ea764df093f4e46ff0debe2d0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157634 Malicious code in keyla-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a2e12185d9d306eace309013c1cf22409440626aa57f525d1b04344e803e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150079 Malicious code in @mipta1/iyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f77a9b4c12af942ee61457e278a4ca1333a0a384f238ccf0079f2721ebfffe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168589 Malicious code in tealove-okta13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d213c7e123524e5920b2377b0425c71246ae1bae72fb628013e1dccb978ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168278 Malicious code in tealove-darknest22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47215b2242d08ac71cf357d22951d23e43460e849f16ae9f30bfe1824cef515d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156408 Malicious code in inal-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e6a533c3ffe94702afdac91dfa0ab6e7f0f340265d94d71bfd2e1411ffc538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166544 Malicious code in syahlan-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f966823f7a6cbf1f19aadad03035eb135e60a3b5e524119395e9348c2ecf702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158132 Malicious code in lina-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac5c0d13e63ed9e97e8369b2020eb569029d7928aa9e900fc78268ef1c14214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156300 Malicious code in ilop-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f55727be591444bbdf1b8f6d1fcbd7a6d4d60375f029fde78acb85bca428abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159396 Malicious code in manadsi-scador-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49524a8a411113c2e6e1fe394d8c80ad65024cf312c26711b84f5574c5bd1c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168682 Malicious code in tealove-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cc14b32eab3255279f9a3f8f25eeb4f9bb557fe669c542799bfedc22849e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150236 Malicious code in @mipta1/sfaar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5f6aa7ffc6063bb34979fa09da49f026d5f4f4b16b07411d1e518bd669ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159828 Malicious code in mansila-tiala-maonldzdddgfai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf84f9dd4995af3bdba9d0784671c44c3333ea154ab611bd1b6b7e2fa399636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153497 Malicious code in avomainah-fragagis-ogunuafoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ada3da94990382724889076682c9227e693c09a3b42f965ee593e3c2a5a92ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163270 Malicious code in nokire-nanali19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98c6d0a15ce0b81b7e3e23ad85bd95bfcb9be0bcade88fe33d64e24c8f63cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160585 Malicious code in modira-fuhopia-janiutasu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014c1db96c55a1058b9c41f0851c20c96c9cb60a4107fe6de6d36d53d3d4b380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aabi-alfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22a3998dec8aecc5148bc8f86ff5c1d8799ba9fb802d562c5d73162f9d9a4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156980 Malicious code in jeep-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea942da907f370aa1baf33efb871e5fdad08b8ada9fd1e6bc18fa48136c8c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161925 Malicious code in nasrul-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1444da2c86ab62e313e90b9c9515bb76a54ade6bb8b90324cb68f5f0508c3346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159630 Malicious code in manda-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c67fbe7a4f8b638084e2af409bab3d7f493f61d9b604d3158517d7514d27c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...