MAL-2025-156972 Malicious code in ita-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4a846201510313bd8ac2d7ded2f5061336430752f69da458fd429307f2aa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164907 Malicious code in rita-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b856c3bfa71c55d1bfec25ea65eb03b786082a1ce05de382e9104dd15cf4741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165791 Malicious code in sau-nakio-ups012uszzgxgfiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02865e75c6124eed754dd4418e0e26ff6db1ef4a05d3dcdd5bd59033ae6a25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163816 Malicious code in nudela-ofgfaf-gajfhhagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85e3cde6d32bedd69afa84a6a5782f3454d60b881f63bdc83e13a17649f7097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168100 Malicious code in tealove-aruma43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb33e86fcd42a51356ae19478da434fd5cd4da0bbe0993bf342dd164a6d2b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154716 Malicious code in dioalgo-kilp-akik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc3109290e0d5fc39638e5797dd50499fb40a2108dd9f00bc13dd0cc179947b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167072 Malicious code in teagood-manaki100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520759cd423bb98840de1c99a8433398f3a8f4ba6128ce04748739834f07de57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169035 Malicious code in tehah-nutar-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c856561fbc69f482943b9dffbe62706dc4718a5f35b517cb1bb4f5e02493e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159165 Malicious code in makaimaigan-aniga-guagiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951aa0bc6f3bf0cf87ff0003ce064e689fc942f1d25b22fe6358d25a97f72430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158309 Malicious code in lookingan-konami48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336f6d6370c17fa90034b2ff5c5e78659c14679191aaa99d428bcf6eb241e256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153328 Malicious code in avminh-afai-fafoaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b21b8e749a5e79396e5a86029f7756e35d8c4f0f8586b1d96c25671c3b81c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159284 Malicious code in man-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405a71231ed434ef458ec04fda23f12b8f89682977d59a9c01046d7552b3c41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163588 Malicious code in nokire-zabuza93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa6074ac921fb0a22cb2a07cd2b91764bbffe5f121f928850f025651f904b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160635 Malicious code in modirai-igamino-jiaamagugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d57de4a6b0ed27d7c45848d8b69b7755467cd1e753ddc94090267fd8f3aff5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160692 Malicious code in modirai-igno-jinnaguhifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840856f52d78d1517e1e1341574aaa89a6524016c26c5795f16685000421fbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164749 Malicious code in rino-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7a7ef108ef5693025803ed428c5871af506905f0da56f11cd95bc008b63904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164441 Malicious code in polymedr-minus-buipenajara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebadc9e2924b32a42a9fb94214c86dcd8636cb385ebbae61dc3d32832cdc7b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145299 Malicious code in natural-indigo-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f37c805f6dd061de76399d9b52952b76e3b19b28a3fe2cad5acb0416bf9ae9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-perseus-xo-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b06bc6e93d26daf13d4509743aa81aedf7d2cc77c9a7522f0242c46ebd25bbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-nightmare-postcss-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e04c09f791909f37fc08b18b6c1c118ce6c84eb94a477f339f2bd455a5caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...