MAL-2025-156738 Malicious code in inufi-gobai-jagiagair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 379c29ea7f2f96444e833420678e3df691db3d7c8324d288c26dd6020bc6a7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154925 Malicious code in fadila-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d7a1bdddd5e12eb6b7449bd811298aedbdc47611c87d90529a80f63b28f820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165136 Malicious code in riyanto-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438df45741530ebb5b86303324ab2acf75dcf29e75bec08dcd5983c439ef3e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167782 Malicious code in teagood-sukuna29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ffdd55ca1bda42c5c9a1b1bfe57f3fee2ce1b7753d403f04de307df13743f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164376 Malicious code in poliaoz-aikk-alini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318bf874421d4d49e57f032a7fd1b268c18bf9dcd64c83371cc05b66ced13a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166655 Malicious code in t-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84e11e66fe284c711eb287567cf0d80a6b5ac9783fbec275c9c641319fe1c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153113 Malicious code in avminah-fagias-iffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c71292ac706619312ac22fa3d5d9cc1a608e28b7e6f1dff675f506ee968d27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161526 Malicious code in nabuf-otmbian-iasfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445d2f1e0b59e75fc22d69d78e7663031ee3c491bff7831e014f72dbaa4ee5b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162655 Malicious code in nokire-kilua63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52061643fc724aaa60a852b76dfcd4d3c1b9f596a52f7f3458286e8faac1e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166993 Malicious code in teagood-lokina3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601447942ea37e3861c8efc19d39efe6d5f81ccd28ed7f28d86f062eef7870a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167533 Malicious code in teagood-nalikoli123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4288e5598f9e5be66057c4f3e231f2323cc7d452f24c0bd0f8b399b030fbdef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150004 Malicious code in @mipta1/eriu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d40e483e962df7d89a6aefb16d193066298291c526c8bff037a123683201f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152500 Malicious code in alvira-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb601da993146c49bb4177bfc6aa0ac295a3b1ac1d0f444858f442696b4f34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154740 Malicious code in dioalgo-klop-kalobaksi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90ab3ce572da7a17da97f425f4c591f97f75661530a076b2e0b001a1b02d39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165877 Malicious code in shilang-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3121b1030817a9e12920e28a9a40644d0f9174d0e62c5bf58c8dc878240c69d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_whippet_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a25c2754bac8cc80e2a1d377aa3d43b5fde90dbdfdc3a6904cf10db2b2b550a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-elektra-test-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54feba1b0ea2f5045f52f560727f715820fe005c0b44599e9e1078f5ea1108b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-markdown-antares-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bea403516c121724c9d4a28b3fa6454abe86afda0da76546d5615ec9e091d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-antares-command-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3d5b92538efc5003fd39ea6c07c4688b0790c70dbc5345a0b1bfbaa470acab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-css-loader-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf85a0c6954af3220d830d7c9c1f03a4cd0ec3ab8e1d39a4733b5a32c012ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...