MAL-2025-156013 Malicious code in icha-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c963df8d03941b7fdae383467ad355d3bf0f1ca8019526a99d78042fb8ba727e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169517 Malicious code in uaragifa-afati-urufuaayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff2fd0cc2bf1f2ba05593f94e5022020d522a7067ba724f65cb1f702d738a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157769 Malicious code in kuinsu-lukoi-kinatmumagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8823e371330014bac680b50b464e9ed0deb255e3d6c22e6de515c3156b54dc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160508 Malicious code in miracle-dok-uiaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7454f4c4073df313a6f3eb5bb1eeba9b8dbd19b58b0c7b0e967ff7540be66a21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165914 Malicious code in shilang-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab43d73831b37a4d79abbab857a7f26d7f2c40c0b5372f4fabf669da46a6de51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165171 Malicious code in riyanto-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7908611f8fe804342d7507f70b24d0e882273b5a32c3914423cddcd54d690d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162398 Malicious code in nokire-arhani81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03db4dab919514988a13dc5d5983454236da392f1d67cec3554afff18ca6fe0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165735 Malicious code in samehadaku-sess-sur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a7958d9feb400057b4159fda558455e1f6eab17b1cac564ac2437d2c8b8cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152970 Malicious code in astia-alaki-malosskiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efe580e776047e96bf7b1bc865741a0c694cd482a8afe41f3f8f858629d6ef14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167315 Malicious code in teagood-nakamala5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0126052f54f50077cee82437733dcce358b785e13f4e978f7eb9c7a7729dc91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170014 Malicious code in uinsu-loti-bnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3dd5168b79d6dc708239220cfdc9b4fe6714abe59edea13982a66e418093821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169840 Malicious code in uinsu-list-patuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6af4967193f23b17a8b53bc2398577729c61975e7962fc0272f7a52b334054e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151036 Malicious code in @miptaa02/wqh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33874a1ac8a6cf1b4e4d62bcbc3d47d23db3526eb4986f4bd1e6e752fc52832c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152212 Malicious code in alfiansyah-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96999eb79abb43c51922173f055cac4626b2741eb720bf0202c427ea6fb2a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154910 Malicious code in fadila-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ab3b9a9186bedbd76a8323e4c13502c46976b97e799d3f5e9636f812692857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168490 Malicious code in tealove-nice13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac4eef4754348b9519bf57ac82e030bada0667f00c7f1a148b60d2cc3826cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163063 Malicious code in nokire-namiresan13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197b25c2451868fd4629059bc893156d3f9a7d72d92628beffc208ab49106341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170435 Malicious code in verify-tac-mal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec73bae3e808f022b9d261c25af4579726fdd69d17c4060e05965ee577382f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161916 Malicious code in nasrul-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99690acfd7846f8831fefed11542546f3d4c5f6af61557cedae39c3b50e8e143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164662 Malicious code in rino-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a01864ac034202b556dc83ca45b43f890164f7f101de559a8d273ea44accb3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...