MAL-2025-154858 Malicious code in fadila-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7788e5c796843b69379495ae7cd2d4e0c9594a61434045c326ecda063e11310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161786 Malicious code in namae-nadua-maavwr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02503797781102d77ee474a8d77bb623e017dc5c2fc7f74d2ae69e725695a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151866 Malicious code in aiboa-molipie-arammia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad471f9a75e03aa38ddfd6829b6ad17770cbc23e08ac393d1f493c202df4432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151401 Malicious code in abina-amugui-anucuamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfb2d713c1bc3cb6b3a042aa7abfb2bf57d1e690ae5174282b20724120d1141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163937 Malicious code in pajero-cir1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85de9e368006825413b6fda3771ab4a9322fbc2db48d84e836bfe7d28e6558d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165932 Malicious code in siregar-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518d0f9e127243fad8e80a3b916a0e68d0b175194fb82cb356e9b2805453a79d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168429 Malicious code in tealove-nameka45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abafdfba33ddc3d6bd556dfad44931e6d2ee8c3bf02f0d4564809002164a9f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166956 Malicious code in teagood-lokika87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff94c156c50bc20ca85e81962fa04191721d0c8dfbc36af2de8037c52dd2e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150705 Malicious code in @miptaa02/gzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b67545ce67a79c8c6155432eb2bba485622ac33c4ef76c667d8fd0b1abbc822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170562 Malicious code in wulan-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454d3d0d6d5f842d4c82e6795470f4c212f8b5d09b75d5590f7b442d8a251711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154440 Malicious code in diago-klp-kauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c05d553760afd1c2461bb2d129a1d57f48b7daea5ce0bee4892d10303bb6c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150327 Malicious code in @mipta19/ad-ajfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ecdfce91af87f13c99ca475201bf32cca8be1bbc2813af9be5b938b25e99e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168895 Malicious code in technical-alobiko-taovlanaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053f641b2bc8bbf5d38b49803ad5718aa8c6a5a05f998a2a848bf24c3284418c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155290 Malicious code in gifa-ota-uauafdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39dc4e206f8c760992513e318679f0cecf09e38a6c498bf71a3942107ade9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163102 Malicious code in nokire-namiresan49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ecd7d8d67fa23b40e6b99cb2aad7cc26db6abaa73be0924c82324c2a074bae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151040 Malicious code in @miptaa02/xdhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1097afcb25def8e5b7d06e7637f5ba8ae7777000c6bfa7c8aec9ebd1465f73fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160658 Malicious code in modirai-igmao-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267474a07d86b3e799350d115e72aed60e2d2bad92ba4d75e0a55e4776243add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156008 Malicious code in icha-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf34996fad6689e528ed366289df80066952bc5e0c7be2820443016c2275ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161310 Malicious code in nabuf-ogaf-doiko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c823017ac5e50b1206b3e491b28d40048e2419814f2f48d6d739e5b61cd8671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160506 Malicious code in miracle-dok-uai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b0a3b59cfe477b7442f59638f6561be8825a421a181a4af7995572c9ad00ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...