MAL-2025-156066 Malicious code in icha-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5844cbfa2f9b1fb27d1999ad3ca4dd1e71465effa384a842252878dbfc0f9e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/arhl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5115fc993f3306cfc668b25aa138c128dcc7202498753b112e37684ce7213f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aloni-tolaankui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f8501c4c1dcf45f4154f56f84845b5f1e8a2fd90b58eb7ccd136f1f1eafebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168434 Malicious code in tealove-nameka8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a1e9b0763294ab2af13d599e5e1a2a489c329f2f31e519a14306865d8fd65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164855 Malicious code in rinto-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba85b3cf137b97a693e35e3bab154013133f45cbe94f2a5c392453d48ef407b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170157 Malicious code in upilka-luzmu-kijnuhigijani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab7eb8bfab350ae000c3626543825a39e45a1efd94a55f5f1a5b030229bf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160544 Malicious code in miracle-dokloi-ikaluk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 117e686deaa2e511a5a3b7abff13d82d28e9c546f10fbad932df5a696a1e301f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167983 Malicious code in teagood-yakuza26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0430937bd5d933b41ea6fa34b2b5820ffa52dc8b95d6a2ef9bae98ea5675a27e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167257 Malicious code in teagood-nakama88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcb2ad6118fe9163d39341496266c01525f776c8b5bb03ae0bc08f5c744a5f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152909 Malicious code in astia-al1f-dareagauahaso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3bc8b13ecd003651c5f6a7a78a0d8ce09c4936625e27cf844e9fde47648d371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163899 Malicious code in nustar-miuyu-nasfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a111fc7872e04c2da607fa294cca90dc5536535481ecfa87b0d6f356341f382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163801 Malicious code in nudela-ofgaf-gafoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67bdccd09312b9737a957eb209b2424f851de1366ec6197b12dcc708a4d34132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161828 Malicious code in namasae-naiuapa-sosamaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c831c30f723ee93c9ba47e87ee3ba2217cafe00559d276ad3dd4d6fea756316a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154527 Malicious code in diago-kulpo-lukahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6bd981bd936913b26a989c37a93a1153ad9f1665629e7a7bfea3713caa2f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165984 Malicious code in siregar-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d54313cc3df7f6b715ff4b2b0179fed04e549728c3706a7e9fef3a726cca31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165228 Malicious code in ronaldowati-cir5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfbd3047d3d91f5e0dc45e737a754786d5f9ae4c720f0bdc17a22b71c13d6031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168506 Malicious code in tealove-nice28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f927c9740d12804f853b61b444c9b6f5cd79995a22dff67f921cc4bee9c7714b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163026 Malicious code in nokire-nakala70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb19cebb7f830300a56bc1f3f93cb7c0147c96d260321067edbc3ac9810041eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170373 Malicious code in verify-ayca-amilsua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c6af33bb6a63347bcb03c0414461fcdbc9270798d7ad81187ecc3343bfbe1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153716 Malicious code in billa-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2542c3363f4be2de5910b6b96ba9266ccb0701416eb19cff39e1c39be5fc66e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...