MAL-2025-154065 Malicious code in cinta-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a32af647cf2d2dd5d00f23c076ba1e70b9dc8f31e3fea96ac2640e287ea97dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168373 Malicious code in tealove-naiman34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 495ed2adaf2eea7b11697fb3aaeb3005fa8d532d7da9052775308e5db694966d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d04b471ea753cf19c0ce99b9e790c8ed82a3b5c583945ca8664e68b4c8c7d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftaiky-doll-partly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9752d4e909c55aa087b0f6dcf9283c9102d05fbba86ab4ec5dd865e75dd7e29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f03a0352150487bb27c879e0b6f090188855e8bc00b8d4257158885e957ed565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b6bd0b8b6182cdb360e31559495851bebb399a1ef5a59540cd61fb14ab04b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159431 Malicious code in manadsi-sfadia-mada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15b88e2b505f3307e00a5a8f6d4a0c0de029b9ffa1dc322e39df6fef38fa910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155459 Malicious code in guras-ters-bru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab475cfa4eedb5ca8526fadcfa0eeaba6d186f41d78f6d09d392d306fada073c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165788 Malicious code in sau-nakiio-ups012uszzgxgfiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1064e4f5756187df74246aa401ce6f9d884efff7c6c10e157eafae6ab7d0cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162606 Malicious code in nokire-kilua2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46df2e7807350e98b3ec7732aad6cde656286a50bd109faaf1492abc2ba08cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162799 Malicious code in nokire-lokcek44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a875032c4c53920705b7ba9655629341168e71ef1801f6fc031e592f391ec26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169559 Malicious code in uaragifa-maraneu-safari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e76c8107074223e92b3e8822f77c3441d550cf328223adbf1b45d25d27f548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155924 Malicious code in ican-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d811f3956719ef82ef96052d62181c557e0dfe373f49b4ee0da3cc0d6f741bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162002 Malicious code in nasution-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3d99fce3a39194e8c1026b97ecf94a75597af507b9fafbee737d81e69b0558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165237 Malicious code in ruji-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d8352085a33a4f73a81224ed7f2c1841a9f7b9861304b2e49189ae067ba923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149949 Malicious code in @mipta1/aseswar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2268af5020b4b99328e12b961cec6e81a22cbec9659b0e9057a2986d96286f25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161888 Malicious code in nasrul-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777200f9024941c7ee70da96624964d55cf4e608d88f57c50424306316b07483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155659 Malicious code in hafiz-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96669ab21ae973c48fa196bd1f45fd675d45015fa2bb1446f5c6e0b03fefcd3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154929 Malicious code in fadila-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6271cbd7b3f0cf5a15ebf2765e398031d8a32e10b8f622725b3a31d887f2134e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167156 Malicious code in teagood-manaki87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50d37e36203071ed73c4741617c5788ad2be55816bd2ae5a718f3304139f439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...