MAL-2025-159696 Malicious code in mans-manapa-ris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa16f97eb198210051444da141cf048a363b2475d3639f831814393ec98efb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166308 Malicious code in sunden-dibiuk-itaruknyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905f40329ede985a7cd64b5f5e0bc460c895c110d1aa415b013e74a376631af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167009 Malicious code in teagood-lokina44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df87b8c0527ce007cc782f29e7cb9ef17acfea0732d2fe0e82a0c80e770ef99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabubauali-nanlii-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab30bb41c7e9cc65c77425dec00d28d9456e26a6b353694f5f811fa06673769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1146f1fd9fbbbada6f2d13cfb8f56ac1b5bc1f6c7394016baee6bebeb0a581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156115 Malicious code in ilal-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b50c6ba50e6f1cde8e7165a3ea3147b5b85b337706ca2ab80dcfbb8e5f2d76a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162999 Malicious code in nokire-nakala46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbe6b62a76a0b8b6485ca30a8354e764bdd6563f8f0e7aa4a22682b509f0d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150752 Malicious code in @miptaa02/irdsis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7998fc2a3b80c790febd333588245044351a06ec14e1742f7761d719381cf78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169346 Malicious code in turisna-safsa-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81142a4472234be8537e36807857765ca4f8080c661d4c0663b64372db525274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160681 Malicious code in modirai-igno-jimg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a727ea716c6db03d2302ae2bce40fab835b2a24ac80e1a099ce6bfdf58612453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155218 Malicious code in fitrok-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29f258691d198ba9af4389b6430d08206f07442236cfcecf6a9ef4249fc4d8ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157291 Malicious code in kamasada-ntai-yolaadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e942931ae01e3dacbbb29b3eebdcb0233bcd6d8c21d895a2ba3e939c41d79a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165230 Malicious code in ronaldowati-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a210e6d91bbed7c4a2d80792290343d15d633f6b41f408a5b71a0a117893bf67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162282 Malicious code in nokire-akaza67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd77b5f5e81b950eb500f80f2a2e06df6d62185b3b9885f77619d18e580ebfb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-figures-hermes-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9160571acd445ede104e9082198649120814b8cf3875b30da59319d2e46739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-blaze-css-loader-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bba164632d28e12cabb4184b77c95bffa22024be324c015f60bdd559987dea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-eclipse-equinox-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 917d12da5b6ec2aea61ffdd55200ca99828c12b9cf613f2732780c089bff606e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passport-sedna-envconfig-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd567b68f6b66910fd78a939b127dbb8a061f91b1e1a03b5a0190f752d0cf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-auth-websockets-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433a1f1238fa18babfb7cdb34edd93e4b23abddb489dead658c27f8f3aec0a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-nextjs-draco-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104bee7c9443b8b60097c56006cf5a5de3a744041d0782374f5a0436e9132b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...