MAL-2025-178081 Malicious code in polymer-rest-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15423206fa1d820ff94a54cc486fea6a2c6799e42bf87e4c990b727a2e6bcb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172737 Malicious code in afrri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e873e58dd0d14c85e422b0dc6d370b71d323339f3d48582fedbcc9ea715330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-mani-ta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de72de0019f637dc38a0fe62a75fcc5a44bbc05edbfd106f73ade138b136cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in starryknight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4468428e7c5485ac0739cb460dfe94f66573e4940e6ff041877e02408094cb5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170722 Malicious code in ahnafzubair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce42ee679fce43052308b338caa0ffb9c0fd8d5d5de54219f1be8256a4eda64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171116 Malicious code in dodynugroho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3399ac7a1c6a5d4788078d057175c1c6918f005784546ffa16588f0de6f37b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ade9a2462d6614c264001b9ca00e1a7e4fd8206a33e5003b7fe80ad702fd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777b49e49a8c0a24d1527706dea286eed555246c3414bff5bdce998f9bfc4c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5150320cbef0d1304731f1baf2c59dfcb442e54a9bccb3608677d87049e75cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faass-ssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90840cd5109513e3cdef42e127db588e6e3daa77a378fd164b3dc98e4809d32f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudashai-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d993bec8674f897197b8d776b05d780e6ce5e74b16024fac6b06f55328d17d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mipta190-boat-composed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f59c1abff1d4fc7c38359cc009956e16e15e50b142e4f4ddefc1ad35a85719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150405 Malicious code in @mipta19/ppr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c363307b39bb5a4e68e9227ccf8b7f7e2b4bd43a3ab16f0542610910fffe76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/nulsll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5fb0b8b44b717752a4f58f619a42303418d222dd11e23faa9023ba4e13afef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ce5c6b9bf7ef4b1c54eff4afe676600a3e818279352b1b42f2f39f991e4f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166684 Malicious code in tadashi-tssu-trsud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0292c578e3ba49e03153962f68091f7e86a3a667a15aee5e70ed580bb4e17df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154192 Malicious code in dajouka-ssaa-t13a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e498a2fee9e1fea8b7c9745125f513b6833d091922af435a8ddf5d294a580c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165382 Malicious code in sabua-muhuyu-tadaafdai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8add3f0a2751b9eec2f7aed1f2943a8a70786c209f5bcf4d7fa34194b2d8054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159038 Malicious code in mahnud-magu-naibkaufam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd3ee51cfe95815eb79bf7e5644c557a42cf588096a7533f35643dec588f306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157072 Malicious code in jimmy-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb8b2234fffb702ad599bf0588499a213818d3ef43f029842206195b0e0b2d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...