MAL-2025-170581 Malicious code in yuda-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f29e1d1514ef9c87abf20b76b634abc2f49607bac1e554bb06e30753d00a3b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6457dcafe7cc3e12d5efc0fca5055425085a274655c9905a6c2e0440fc4f965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165021 Malicious code in rival-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6019d3df7465d7f4083337ce5dc6f9f0b5ae1a8e8efe51db4fc7093e071c3002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150056 Malicious code in @mipta1/ikusho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b65bc35be347c59e24a9508c70a17deda32ebd2b9b560a0669fce0ebb435a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155780 Malicious code in hariyono-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a56b0c372a56a1da4fffea05abb8e087c34dc8a274382fa09c8e171a83248da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150553 Malicious code in @miptaa02/bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437e4049a7a387c1744ccf8a920fa0182d62caa8896a0b266deb69a034fd0fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156488 Malicious code in inal-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f0f5f6cd5aed2b61efd9ed00b62e010215fca50df35eb300826e8f2ede51f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155123 Malicious code in fitra-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d6895f1e826bb9bbbc4043b2c83786c2be92b105f996a7988fbba3d6b625fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164026 Malicious code in parwo-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0540e757d5963819aea61ba94b46f8eb9a54cfa37482be79e9a3f4c53a7a7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170451 Malicious code in verify-tact-busuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 055dcaf61fa7df89bc9f23a96a1ab707d28e2edb3b97da5aa026f73a6f4a9910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167370 Malicious code in teagood-nalikami1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0232b97b3b8ceb50c97a5685407d13cbdab148e5b2bb0c4f4fe6a3b7a2b61462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161326 Malicious code in nabuf-ogauof-dofuafsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9fa072ba67025f9cb445db67f058fc811ae3f096c573881f77ad19108a37c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169517 Malicious code in uaragifa-afati-urufuaayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff2fd0cc2bf1f2ba05593f94e5022020d522a7067ba724f65cb1f702d738a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153858 Malicious code in bitha-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b32466ed8d1f464e0815f193359e8a58df5a76e7f67ddb2c23dfc958900ffe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161103 Malicious code in mutaus-mansis-saintrasse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0209d4be26ceffd1af95e05bddd2f061893c51c4b0206b50d9db31718737d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155701 Malicious code in hariyono-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be68d408a361613411455fa92bea3fa908314162ccd52a1a24183f1e13e1a0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150293 Malicious code in @mipta1/tyua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d313664b07ab718c4effe676ae862a48f5f52d93e8cb2a4893155bfca998a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154402 Malicious code in diago-kamuli-luak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f09c42c12bca600d1b25d768556216192215818da13c9906647e2f3a0669dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159925 Malicious code in mansioda-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518723a17edd37f4c39a468744f3fc2d3f088d814ee94622aa63619343d73b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161070 Malicious code in musta-batada-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb80c61e2b8db360fb0cdcc18e35f12290e3868410c18b307b01abfc5a2b8044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...