MAL-2025-163295 Malicious code in nokire-rara10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887be60a30e60062c849c026c1329bc54e027442bb8c428141b89548dd68076f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167844 Malicious code in teagood-sukuna86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f93aa6ae25235e2aac03c92b878b9c15296abb231c79555a2f25603f6fa4c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156763 Malicious code in iomodra-foa-jafuliafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27479b91003b58c3cc19e898b8aa8a84fb439540ffef03401c32853dcb0060cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151893 Malicious code in aiboa-molpe-asim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a5c9b9ec239d770eba67beaa03ab1f15a83b410e256f87c6c2929e4765b5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152973 Malicious code in astia-alao-mafadi12af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0704580f4f2a328119b68ff07c4d251d6bbce31998d59153e1dfbae4a45b6c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157599 Malicious code in keyla-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988a5a84abe945a800a28d16d37dad08d171dd796f2b528ec1dae0a319214c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165088 Malicious code in riyanto-104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7512fff463672ac15420d90311ba4dc87dbfe847b13c4f5206efcb784d57214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153099 Malicious code in avminah-fagias-fimaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce2fae6a67b7f319b7594762eee721980dcd30906928f784102ec2e2cf89cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149952 Malicious code in @mipta1/aseszwasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0c5389e5a5ce2f85ba640336debe4b4a0d0d188800e636400065fb9e2a9994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151818 Malicious code in aiboa-mioloipe-agatamauiaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4597f35e6de70cb209661e847472a560d520f05fc1c9862c875155b64aa2cd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152060 Malicious code in aji-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c102033aa13261e6fad3354bf8eaaef2e572ded58378757903081f67e76cd5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159087 Malicious code in mahnud-nofity-gonifga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb463ddf4373ddd098b033ad3307dfc40c6ee5543d08c9ca1bcc82ac814468ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-event-dependencies-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9c7cfb7f15ef248aaaa8a66266a84dee824fef7044f5a9e9c85acff1ab1726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-janus-nightwatch-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e0d21c5ebe18126909d8f13503d3cd2e944beb10bcf2c5888bf01546bfbfc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-sedna-nebula-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45388b7519c742a25b573574840b632ba3027a54fdfb1a8f56896bd3a65e63ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-semantic-release-rimraf-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6934a6a244e8232e7f3749bda7554145ae9222e5bb1fa7d36edd2e33e2f9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-chariklo-aether-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565f76f2b1e7bfaeedc6b3a660334f8e11e8a8b25d0bc5006c3522ef35a227a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-mensa-pegasus-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2afc3e2aee8b3966ed7531a5d556897d37bc1bdf1d7ad73a0850368bc5bc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-lint-kastra-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa350b2d4c3c265a386f4cd6b20c20ca0c9bee2e2e106102119c79f0b582dcb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-miranda-semantic-release-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db5f4c73528f0c0fcbe4622b4a75210f8fc0917baee6eb51fcccadb84f1b4c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...