MAL-2025-155845 Malicious code in iba-otana-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5106e92a2e7f3ef4c75b3ba549dbc05b9a883d8f17ac911f1b658a2eac1ba6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155234 Malicious code in fitrok-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7ebc8cfa4ebd752825dcf984d35b8b48a1262a5d55a18a5103bf1874c62403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164923 Malicious code in rita-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3d1dc785ecc7bde4c89b83ff0f75f6b1a906f89cfb99338f49aa58f9381a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153109 Malicious code in avminah-fagias-fimokafiugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e62359525b92455dcf303cc6477e451d7efee8308b1926d9e9a39d68f97c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150821 Malicious code in @miptaa02/mbape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1195723813c4fd9cb29b972f2d59169cd5543f520cf2a24e2aaad025bd63b239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153906 Malicious code in buatafa-buaaat-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b162c8d5c3bc242f9d91be2e44c0b9962467fc0e638893e1fe77888933682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156942 Malicious code in ita-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceed00085c980ba8e71a7bb914ee847987d43e20d95bbc76eb0c7feaa4a7f823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162767 Malicious code in nokire-lokcek15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf4cb4d12a32b466507bf6e3cf3331b55f73a521d0bc89648e4428e78f5e23e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160651 Malicious code in modirai-igimamafo-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4910a036863f9feca32f1b2f86257e58847c1d82a033961d1aa337901306baa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167155 Malicious code in teagood-manaki86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e41865f5d9b2efb9b7cefdd6ca13f6e5fa7d7312ee9a17131396039f0f3ccaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162955 Malicious code in nokire-loklok96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5c0ef7f12c801ea9f0291aacbd6cdf1653184035d41376f32415b3a455f65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160974 Malicious code in muny-nutsdr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317859b496a3f5e06081d2bd444c6e85ad95dda35493c7533201d68b2bf8b210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152334 Malicious code in alita-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64411674ae14ac00b897a60b5215b811bafb4cfc0a4525ff785c0cf609b0b033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151065 Malicious code in abang-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e438d23af5ea0a765e65458f7164a9ec5a845b588f4d03b7fe874ca62f5479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157579 Malicious code in keyla-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbca3bace64e529a9c8da548be8397f6003c52f0b5f47382170a67c01c517eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157318 Malicious code in kamasada-nusata-budnajsadab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9dc18dcab9fc1c17b55e4eba61dc958ab571833cc81e41bfd346ee083c7bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164410 Malicious code in polymedarnan-nut-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618cad074edb05b5c887492ebc52d2ecde1702c71e873b646dfa627ceb93d260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansioda-nomduai-mungu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd53e95a297642073048aed37f83cb6991d523948efd17bde31335ddeebfc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aedb6a290b5c6c95a31d32fe767a8d150476540eeaf16c7f16808f2ed343ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-uglify-js-draco-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26869fd77a392ca463df0916b836137bfb66b07bbfff340b495ad7e48b566e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...