MAL-2025-159784 Malicious code in mansila-tdhfla-magai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d12cfb5846a0e69211a219c1a5f3842ae0bd320cbd79f7e88135c221623e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165104 Malicious code in riyanto-120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f44b2fe18154072f57fb80443e99c12e770f1ed828577bbed49381c73fc44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163408 Malicious code in nokire-sekiya20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd42a07524186ab4fc543ff24226ae7065fd279c4577ac72ae79a7959dcee5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163717 Malicious code in nudela-af-gaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f4fc2e294a60bf21a73144f00c6ffa5d19ef416cc38dc081ab0d578466c0d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157515 Malicious code in kentung-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d81e763987a1c14a85f43018ba91d69f1547f6b86d866d188395246339c697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163768 Malicious code in nudela-gagafhf-gasfoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b504c8ae7965e62cf715bc9da69ee96bfac7137d667dd8191d7b66b70013a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152124 Malicious code in aji-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdec47942174cf618e9d97263be9af576d44a92c96a39fd0e21c7cfcc2dd184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155460 Malicious code in guras-ters-brue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d5ac199f8beec963a4947562c7001fa766826a3fa7e502ae97a3b2ea026a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156487 Malicious code in inal-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5793b09edeac8653710851f09a0dccfff15e94b36c583f237fb54a058aec0b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155386 Malicious code in guras-asia-vietna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dabe0b3bda2c010422810f9a12829c5bca0a0cb1f1bd4f1c3caa22e1623b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157804 Malicious code in kuinsu-uiu-vilkukmbimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345a2aa62978c3f4f0f5e80c6e55f5d25d69028e8917917e856e78f1e9ad7334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161914 Malicious code in nasrul-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f43cce915755c7bbcf934f6855380b6d75d2a63db88685c56ec53f072a5799fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153512 Malicious code in avomainah-fragis-ogudfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094c08233eb0f2825a6c3fc47e90d7ae5e8a81104bb38609fdce02be3c1be9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166259 Malicious code in sunden-diak-nubitr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76d0adc1ed5a1ec0fbae95edef4734ba7212d9d20940579d92bad92ac2cb831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-hapi-buffer-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daaa6f3120d4666fb5bf52550f2bea95213da7f8afc741f1360119204f1bfdeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-phoenix-altair-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56358002f8c5f94fc9121e5c7eed6f83e3b6ae720afe694721b04db71840074b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-async-readable-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35c33f05d6aa52a43157130c15b3cb8b2935e68f7399cff7af2477785e2453d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-elektra-impulse-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2eb8e6510ea2b0fe73a9d801e439dec04f4efc6545ba6b27f35e11ed2a826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-cors-bootstrap-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a625b4f86ac38833ce2bcd8b9b3317525645addade1fd9703904c39a78828bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-jwt-sails-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb006c2b2793dbbcbe5f7a7f5b52c5850abecd1b69042e481b38dc15078b81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...