MAL-2025-152561 Malicious code in alvito-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3730a6b691a5408d37f78a3c36c23e4960ec68f30d93905ea339381ced4009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163600 Malicious code in nokire-zenitsu14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77167d154123e03860311a47ee2b281dc305388cf3a975266dfd6e010b37f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160051 Malicious code in manurung-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae78d94834dd405712d2313df17e5a7fee3e0ad74ec911390e78f92ff01128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163431 Malicious code in nokire-sekiya41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605daa534f12aaf974197a5adca28737f265e5a7ae97a2ff2dd95afb781e8793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169435 Malicious code in uafagarug-mide-fdtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d65e45de4bcee953a508aba2889e2ef3983897bdc2008364764733fb3e9a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154396 Malicious code in diago-kamoli-lumahoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa615f3db7877cd6ab5b0e3b1491e20523474597efe63579686ccd2a8f3c9163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154502 Malicious code in diago-kulp-kabuko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d76d15f8477581a538d54a97037e543ac1c8a3e8514ea39a2db40ae9e9939ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153973 Malicious code in bufpani-muiyau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c161ba709c6676441e34810374f059897d40519b9256d2dfa38743458e9d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157474 Malicious code in kapvino-sifafagiama-fagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859f288540fe10f993f74805a9f498f732bc4d31eab6f2d1523d1e75a5cf1351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153482 Malicious code in avomainah-fagaius-fofaguyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381b857c88a7161a044a03625cb4e41bee81a07656c2556e023b097813cb9ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161458 Malicious code in nabuf-otimmn-afoqoga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523c49ff9cb588a45c2da9bc900d3c3c191c9fceb6c629a5e3777508731e26bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170197 Malicious code in uyafu-tuftadat-darautut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35604ba7c4fe309c05631a64022f7db05f24323bf3f4b9f9853e94f4aa98ecf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167290 Malicious code in teagood-nakamala27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f9166bcc06273b78753b1b3a8ba28b7cca4c1f826ac0f5c94525c960709763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168374 Malicious code in tealove-naiman35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa342a38403f6cbd3ad00dc31b262e929a31760485a16e2918cefd1c540f8bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151530 Malicious code in abu-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb7e880b0b347b9aa9fb8d05b796a80b582dc958dc9cef6f3f7ba79d03bf995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166735 Malicious code in teaa-reborn38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2758aba44f676a165a9fc041a44db6156fe7866f16c137555a9cf2a22ca7a75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165526 Malicious code in sabudaaopa-muyag-bafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9bded51d73714b471fc72545d7eea1b1fb2cfc578baad9464549a9caa90c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155762 Malicious code in hariyono-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b59790865902cd72aabb1943031af7549a135b9bdf8c625fe570a6b972b3a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150695 Malicious code in @miptaa02/giyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487e401241a6920add2a0586b9824ab74297381fedae2d1b59210ff39b2b0e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169031 Malicious code in tehah-nuidaf-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41d92724c4d7aa0f523b0521bdb1f44f355aadf877b8856698c3b30adf19a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...