MAL-2025-165880 Malicious code in shilang-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1c46ae26d72426e273c2d1da05cb0b6d7c71cf9ec4ae1396e4b882a091c309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156013 Malicious code in icha-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c963df8d03941b7fdae383467ad355d3bf0f1ca8019526a99d78042fb8ba727e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157834 Malicious code in kuinsu-uyillu-vilanaavnakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c020c2ff60fcb1e876aeb8a1c1247aa628d05c3263114776773327f17fe52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153858 Malicious code in bitha-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b32466ed8d1f464e0815f193359e8a58df5a76e7f67ddb2c23dfc958900ffe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163094 Malicious code in nokire-namiresan41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d71ff63b8cd1b4a4df2e71b009096033e3d819d1d3d1e181cb33fde70a8253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167964 Malicious code in teagood-yakuza1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7deb7d2b421f5ffc0d9fe5314246f48ed41e4628c4fe201b1fd836048c8dd63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154422 Malicious code in diago-klop-kalosibak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a6f4304eff398deaeb3d98ad676603754436adeaee8b9c4d5edffabb861d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150180 Malicious code in @mipta1/qwaea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a472d8fb6f5eb898c9b8fd53881f4abb3353b26674068baefda58617ec2a1ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151814 Malicious code in aiboa-mioliupe-augasiatia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7686a3ae737cd765bc619795171170547deabb044bf223d66d4bdd01d3b54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166475 Malicious code in sunderlan-uyud-vamaiunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a3a96106f2e8ba5d59a253a46cae14248fc1cdca29ee0a89b033ed4473a705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169259 Malicious code in trevora-cir62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa631775d7323864d12114c94b3d777a18532d14d7b14f82cf17bd0a38434369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161853 Malicious code in namase-mewekay-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad10ac890841d16d6a9e009ac7aee60d491a77889f030858d112951c99970b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168492 Malicious code in tealove-nice15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14440727387e5f1f6307159ff786ed181e3ae53d17d37565bb0e3893d6649894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154113 Malicious code in cinta-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d027f473c5692317572f6b091b8bdff91b1f5700fe89b0ae3c8003025205aca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162873 Malicious code in nokire-loklok21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93bef10120fc4e7b45f5a11c2502c14269e652f4ade6ab6c991aa034b223616d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165926 Malicious code in siregar-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2476cd38a92e090fccbfa6ce7cfb077cbc58ad7a5925bd865a0c79d4ac294c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152012 Malicious code in air-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b8fe28dbba6ae8d98728cb188c25404339385bebb25b7ca73aba0cc30e79ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153871 Malicious code in bitha-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee994ec6d82ebc1ad956930eda682668a42c7db0afc4a94b1eab7abe94ecf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152475 Malicious code in alvira-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ceed1a213f0e85ca4c3d612060494b99514634b633698519b451f26ddd8dbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159777 Malicious code in mansila-tdhfla-mafgdgjla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc96eba70b81c369ef69aad24705cf7252864b0c9e7f2f9667f8281623f77b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...