MAL-2025-155684 Malicious code in hariyono-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01aff161593a439ca24efcbf27ffe689f65ad767b5c45c71ec5eab18b287dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150977 Malicious code in @miptaa02/tfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78146787eec10e34c2e732a4a2bb559fda3290016e3ddff3ce9b96d0c4c80ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158548 Malicious code in lookingan-namakiki38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b7f832319b088ba6abe0ea5b3fd6133fd3850acf1f71b75b995fd5dca30f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151622 Malicious code in abuni-niia-luhubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6df9f5f9ccc1b47dbc595ddfb30b9f030e8908c5ccfb3dc7ed2306b8a334e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157136 Malicious code in jurss-apszas-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01f9cd55c3f7548fed0699c71e5746fa1384cad109398f3267d1274148af983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161186 Malicious code in mutus-nutasdra-nuatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbc02180998b9ec48d617d6d34ea418f9976fd55854afeb9ac052723fed669f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152541 Malicious code in alvito-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49070a91d8d29621aebec4849345c0dc242b025f7f26e9431a6491cc0440c5bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159895 Malicious code in mansila-toaviala-madoiibsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14496e2e4f01ee67e8e8c5f8f06c38db0a20b0ad66308eed716b8c8900747233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162415 Malicious code in nokire-arhani97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae66002926c08e06961dc96e876f9e7d3efacf687b448b215ec3db0676c7d368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161791 Malicious code in namae-nadua-mavxio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f065604f9a6628eb8443c93aed5804af6fb3b1eeb144b7050e30d52a0103e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162224 Malicious code in nokire-akaza13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2300a1c249148e35de97024639597ada37aae64a06eacb064039c53ecf5017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159877 Malicious code in mansila-toafvila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018589373a38f8c6f7a50bfc801c976cc448ef46a0631f6eb61f9b8deb37fdef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162975 Malicious code in nokire-nakala23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65285ed77c64cfec539c4692c2a98cf122affe7680738b7f77010e79d8c4b7b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166313 Malicious code in sunden-dibok-inumaliuinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bd4aa45c834c13961fdb3c876551366055b6837f3b7576635c38edd6322c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155874 Malicious code in ican-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d891f670a1eda926665856cbbb7477f49cb5f700ee07944d803711f1e4d3b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166882 Malicious code in teagood-lokika2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d5103094cd72b906e39dd3d1b615f42d7b24abcfaaaad62c31db4e55ad25a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155951 Malicious code in ican-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a1e7c831ae6dca400710fd4792ba89aadbaf0dab99dc9fb69e8a8aab05dac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150876 Malicious code in @miptaa02/nyaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d9d3b5ae2e0b4217e9adf4e59a8268e5d25bf0a48f7288f4bf0d1a09750566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152142 Malicious code in akabia-aligma-agaiubva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0093e8410269de4f10cc0d8cc9d9b5e39e2aadeb4bbd5c495aa3c32397fe389f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151684 Malicious code in acagiyuyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61060e32a613a39a1c293829b8ec124e291c49994cceed8f038965660e889240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...