MAL-2025-156124 Malicious code in ilal-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22b20da043cb8b2cd22696336a5d04253be6300080e943db0e410caf6cf1ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165477 Malicious code in sabua-muyaig-bufugabafit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5e5ec35c43dce9fd1a670eee78d10cc89e832cb88e5c45558e0e435825d8ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159485 Malicious code in manadsi-sordi-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e15d60d8a7682bab033fcb7a90f45d802f80de22c0993de5a6ba343ff9b9a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170390 Malicious code in verify-ayica-amalaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834ebcf9982737f49e83081c7805e6dc56f23622dc5fc1290bbef7c09a47975a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151499 Malicious code in abiuna-mobi-amuasubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b12a45cddb612d944b13842edd60af6a438a8c83fa3902a0cbd169d09466969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165665 Malicious code in saku-aku-idusanun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013aa3bff8945786785c0cd8bf00b954e691470670b3ebd81f97d4c963a186c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155319 Malicious code in gifa-otau-uasuagsffdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ba6810291b4e877ff7540e60b1e5bf346fabc7a41c4b956395e8d67096f1a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164974 Malicious code in rita-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1113ff87d8b246375c2f26bfcfebba0ebf286eccf6b65bebf895141e13c181d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153279 Malicious code in avminasah-aifomgagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ac472082e436a0680f84ec6d0be804bd420ade58b616fcd755f77d48cf4ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162348 Malicious code in nokire-arhani36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1fbd4807c612ee05db7d9f4f125b74392af9570f106a3ba6eb2072619967c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166355 Malicious code in sunden-udik-vajua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4d0bed80c9a638e359229e16248b713d8af15caa8e493c4fd2245bd695d540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156884 Malicious code in irashi-21-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73102dd7545b1d5e5470f5bcd49cfaa23720984ac8cc05ce72786ec65d58c474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-cache-dactyl-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c89e45b27de330b847c8bce6f45bfee848d5d30bb49965b5d63299d0e86ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-miranda-atlas-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b871897d8a5677672d07dadfea9ac627453eb33e2885050a1e42fe3e5aff7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-passport-webdriverio-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30cf25fea46387169a2ddaa6718fe8741c9040928feaa0d19f700989e189e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-sqlite-betelgeuse-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc60883362f96ce17af77f42c511cdc772ed4ff9c97acf2447b1547435cb5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-kastra-got-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b681ac37012ca91d6377363d6e5a8296b01d4e42c7f49d917d4e368a0be7af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-hydra-test-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c07e9826c7bcfe2f3fba90971dfc109aa47a799c8079f02becdfdaea244b9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-morgan-javascript-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667105714c7d9e1c524299dfa33797fcde0a423352f5c86fc8b866f4bcc72edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-less-loader-public-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab89e3eb545254371daacf9a56dc9363bf5b97df517aec1450925538803cfb6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...