MAL-2025-166387 Malicious code in sunder-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e6f3b955e17a7ea35b17a024f3729708f62ffc0aba2a41996540032b7dd731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150028 Malicious code in @mipta1/gfdxudgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2aba267829517565c7a9e3de307c0691d54deb92b8b5bb5f9f6d02b5ed0978b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164281 Malicious code in pitra-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd6003bf6495411bfd30f3cd1b8504d514f7033c597ed2d201a7a94280f393c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169780 Malicious code in uinsnu-lotiupomi-kilabarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d3a603b813b196fbe9b08f9c22364fe9c42f9c9a7a8606f7e4111278eb7920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167446 Malicious code in teagood-nalikami46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b24ad4cbc932725ee7d533f2d0782b0cd36b960c0479c4a90f79db107464bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153685 Malicious code in billa-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015a65e5f189cead34be4a53a7f7a0a43ab39845214b031cde11311d28bb8077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150170 Malicious code in @mipta1/nulll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1959d65a2292f8a74ba6daefd72e2513c39f6b99ba7309f886a75200fee9543f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152204 Malicious code in akanai-ala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c36ecbc4af419bcc63b0f62a19c650cade5dd1354443b6163fbd1dbecb6127a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162872 Malicious code in nokire-loklok20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b0af9676c19ced3467255a64d0b8ca21b77ab2e0e930c3983d5e0611ad8693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157425 Malicious code in kapai-afaa-agda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb6cc9ada5184f23d30fcc4319b375c96ac559c68040cb47e45c6e9c9e84f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170235 Malicious code in uyifiuza-iytadut-darifana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909b5dc70cda14d5d0b6f11916a8e5bd881dbaa83b2dba2fcbb4cfb7058eaec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169620 Malicious code in uarug-mitayiuhai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea21295271e40e797d330926a1b91dd5749cd87d660e00eed0dae4cb2e14dfe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160995 Malicious code in mursai-bduasrt-ssda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a3bb3d40df775d5bd7467e823a723ada5f9b089840510b33fbb70a2945c640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167155 Malicious code in teagood-manaki86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e41865f5d9b2efb9b7cefdd6ca13f6e5fa7d7312ee9a17131396039f0f3ccaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166589 Malicious code in syahlan-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7c235636de257d735b80ef3c63582d8fb79046505abba396be986501e72ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163989 Malicious code in parwo-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346b225c378f3d2a7f8db5265c91605b98a7393cceef713d22a51c31299b6023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158146 Malicious code in lina-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3454ffa355326537152e2c8d86ea50a99c1ec17fec128303f10a01f43374f94e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164718 Malicious code in rino-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc69f36535731155a4b39cb46adbad4da55e9ea6e6503e5770b69fd6d3b7fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164969 Malicious code in rita-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa914d56f841af2a36915cfed6007230796015b509b66e0bc1c8a68fbfffae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154894 Malicious code in fadila-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de9ec139e4b628d6245ef52ad2f14cf89a1251f5feb31ce1733e488bc12ebee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...