MAL-2025-154370 Malicious code in diago-kamli-lumiola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b8415d246938baf39c3e65a517e470665945fd271ecaf4cc0cef7831cc15a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163995 Malicious code in parwo-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fa560c44fd78ab2c53d6ef181f03f595bcadfd5f38fd903fc1949b548b8096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150566 Malicious code in @miptaa02/dffg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8e0e66de984f3d7be61267b681cc1b54056ef14bcb6e6a36b49e025c4ef541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156100 Malicious code in ilal-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81387e2567899712f5ec3a64e942f0e4df55ff5bdc58a9cd1dcc7a7f594e6a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159066 Malicious code in mahnud-mau-naayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543c81cad78a64a8684d12ede5d0835eb13c02d371f5edc3cd148155e5ca6a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162436 Malicious code in nokire-arjuna25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcb84a451f990171fb383523baf7f7c195fc6d25b1ace9a64d97f68d88364ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157621 Malicious code in keyla-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f3f791359f4cfae22d7aa0a844b686dbf1ab802111ebec15be6d18fd4bb7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158405 Malicious code in lookingan-nakomi45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b2c68b0a4909e0c0496e5588d7680361d9180919ed8a5ee521da77b5fb5f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151053 Malicious code in @oppo25/teanager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb71f121e863eff573f53cefccff448ce09432c675c576d71b7ccce08e11fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167335 Malicious code in teagood-nakamala68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a884157f4f022c06ac4f87c77f1367c4dfe1b4635f6dc4cd63a3b2fe3f0d12d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153308 Malicious code in avminh-afagias-ifadaaifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93becb69935a9490d8238d28ff6a91fdadb616cc8f3ab573d91954696a12a225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150323 Malicious code in @mipta1/ytuax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239347468daf594e6441cb71b3043b5dacbc7ae17a79972fdff8a6f068ecd78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169613 Malicious code in uarug-miafi-suatafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d088ddb8b2df103b40065871f8340ecc4676b15fe2b6d02fa00618a1799545d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150937 Malicious code in @miptaa02/savia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93aa5d7b53e8036b3c9873ebd5d67bc73b94f178247ce70b08d3b2c2d6c711fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165705 Malicious code in salabunuli-nalikuia-lusbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf3d400f0282226c1bbff272dfc432cebce78001667e8288d02624fcb39b768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149954 Malicious code in @mipta1/asewar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f26bfa91ab985696f17da457731e25e408fef0cbd0184ad9a97e0458595c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165427 Malicious code in sabua-muyafig-budaffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29dccd0c1b791a08aace841e9361d2990ad57a57b855c5f39d30c1fb33469f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161902 Malicious code in nasrul-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbeb37af36e977c0dcf75a3373cfddaf3f444fcc1b98b55ecd26413d484788c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12876e8cbad7e360d43daa19fea64a3b699c158b322d73936b4be7e6def90491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd12e735ed5cefb55d27e68ab006ee94d42051676d81010704e3b98bd91d5da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...