MAL-2025-152397 Malicious code in alita-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1a69344b680a0a8811b40ba4681350c7212cc3c4156f0f4e73cd33ff230d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163411 Malicious code in nokire-sekiya23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451b404129559264740f7c2a83fce0acc12c63ef99f5feceae91f7bf4d7686ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e80c43be16fa4235dede1d4ea13d3274181479ccc459fb180beb53e57059c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b022219eb50f4a8f91fe79fb186dfeb41fb4cb053ddc231e636a60a2b25fbbee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otin-agogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 113198e1113933c28b29a99c0b25a132bf77625f389c20e8cf6f956c3849294a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58cbb06c7d4197190525a9a0b1697cbd7898f1d27f07fdbbc621b7edc53efe03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nioyanali-lausukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ebec41fd2a94675acefee2885d85880ce3a557159af83fbbf2a3e9cdc8d059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32bb9bfe57fb4809dbd6676baa049cfe51c043216507ab587ac1afafbb8b9b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160287 Malicious code in messi-afta-fuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933a56284c407da2ea9900ec88df823a73f080777212e1ad25633a04976d0a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153206 Malicious code in avminah-fagmas-diogg1aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527acd7c3f1d7e29a77ef892ad88f9cceb80dc8a1385ec8536b9b1bf4a011d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165601 Malicious code in saku-aiaku-umuaialakdaosoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7857d3cd234b75176a9c7b85dc016fd10b5289c923f4139772c6054bc32c2cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/aim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f68a899d440e1a147ebf9b80f79359f78aa6ebb32dbfb9370ac6ce592cbff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lost-diunsvuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd10e075a0b8926b951c3682b6eb45c94417a63469ffe5a30545488f0b1eb6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-danger-fanthom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be882fd01b919c51643da2203626f71a1103653d37a1f471a4ac8f29a91ccb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153004 Malicious code in aviaah-afgagaganfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381cda565bb424edb6d491d7780e202ba9dc1ba4df568eba9e9da976d798b812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149919 Malicious code in @mipta1/aizsax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62253c1037363e9e0cb3627882b527fdcfd09824f034e7956c51ca4bbc000ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164132 Malicious code in pilka-kalimas-nulivauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5d75340e25d34c84dd32388aa4a772b761fba5f12da4033dfbe95d52809e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48364c10d62651ddd0544fdee3a398823ba87504d3041a85cd1eb09d14671b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163940 Malicious code in pajero-cir12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248f03b8001b05b6a36d27b49a238ca573ed15119b420b019500fd5cb22b3e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158789 Malicious code in lookingan-namala74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd665c1bab413411f0c9a00c1eb3b83fefd47f46463cad8dc55a27740e0cc223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...