MAL-2025-186237 Malicious code in command-xo-module-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd904aec9c3a6c08fbd9825ef68e0a13af99f7a6873004f2183b1f88c4f22d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-dikg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90022fb9e51aab356734925aaf6de982075f0406473d9023ed294ef58b67d036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183900 Malicious code in masv-ilo-cva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0bc4ba5fa019160de40aa8b58d6cee15e543bb59c4c2c28a0c708fcbd4e4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157f29442f148d3b344103b45865c1b2ddbe2fc0b35ef36d667f85ecd3f3619b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181061 Malicious code in teate-thy-sonic-voze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714e89d9b5d48ad3bae6b65d0c529cb89636e1c664d69c68b1e3874991756ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faig-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9322dd7e911d2b5c30b194e61b11513ad026ae616891c2b14e49c04c7c00ae47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-zagub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945cfd83e1e95cc897f5f672cfe9db99043b98a3f51ab02804f2a950a400c234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179705 Malicious code in kisut-faig-dikanai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd84ce7273b77bcefc804e137e81422475c699b00997dc1217bc67dbb6322de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-maba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9793f6e1b04ac73449c530a401f840f1b8c010487fce0c7f38b77df440daa14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177923 Malicious code in polymer-datdfsadsid-ragadafadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d96edab443821cdd662e5c2eafa648b74cc3513e74503996c3e088f5f8f8281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-afasofavbagdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1c700c83bb48279e2e4adebe63e7a63dec51e4930199b41b7191e6894d8e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173311 Malicious code in buta-faag-safa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552455214ca3d8d2f39f69365b1ad6b606ddce8d74b80faa22a9e9a28ff1824a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iunyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009fca2b3b09f252de6ea56c9e256e3dd38935e1eca7536c33fb720227fa6bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176653 Malicious code in nuilva-bava-mnaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883486e35e62f7bfb93a23b702d62e1e2b2b3811e78b02f2414b130e475036a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d81629a108c1c22751904c02fdca540020590588011d855c481b9775f8a2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d7dba0c2d19f614d4602fdd772a691deb793a5f470d9f5bf9a111d9f36221c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tobrut-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15a181a3ab4dba979530f420a786f064ceb158cc906e5cac6fd72d8bf8388c10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162294 Malicious code in nokire-akaza78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d6f60222431bb9ad22b22ab3fa56a54645c2022f2313488d4c0bfca78eabf27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150608 Malicious code in @miptaa02/fahg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c016b6e63e41e6e44a3b8d1b200e16ed6784f28c98ccf8e28a4fe8a0ccbd26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154419 Malicious code in diago-klop-kalobaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6f44a3b2eedbc939a5593cc5c098e02b2b349bd91e79983b4404c3979cfd27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...