MAL-2025-168670 Malicious code in tealove-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3076b0178760e2817636fd3c5c672fb5eb060f028cb7907bbbcf1876677a6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151042 Malicious code in @miptaa02/xfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ec0dcf94f9d58ccaac2abdd09a8a9045fe3952f84966a7bedf8e096aa20bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156609 Malicious code in inufgi-goa-jamufi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5949b8c5e7db9698c5c442aa992894c6e8a336d955593ddaf940e725367e9e4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150082 Malicious code in @mipta1/iyuglk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31e1024c003a1257f877dd0f043ab7f136693e35a48fefdea388993b6c3f6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164291 Malicious code in pitra-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8807d80108b36413eed18c0533aefbe03a4aa4d092fb6d27fd1121573fa9b370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154304 Malicious code in dia-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa771970333a616dcc0a3b6d59a32b3eb2c070ab6d414ea7c734417c4b48ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169341 Malicious code in turisna-gsasad-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7531702227b16e1e1694131eab8bcf21bf08861fadfe30f5df6ef1faf46a5f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151582 Malicious code in abuh-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d6f8e44d1a68d959a0802ebf0ffece5da4ec196d0f957ac11bca0c4f7aa9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153260 Malicious code in avminasah-afiigfmgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df76f4363f5cec1e55f6945685653ec4696afcc1d2362533b88624eb91a95d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155158 Malicious code in fitra-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638290d39741b0bff7d8f82cb35434b6d14fa8091db6c13ad218af335276df97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162076 Malicious code in nokigragne-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f0a98ce55f7a5e0476f2bee8aa563b38de0587815579e34a3ad7f2ad3176c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155445 Malicious code in guras-nutra-nutapas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499f2a4c2dcead80408c2800bedc68b0130fea0fbb998ec1cc84076dd7119b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164457 Malicious code in polymer-inti-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cadb5cd720701e98705f1db09ac67ce5b961c976a2903ea2931bc18f9cf54de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160083 Malicious code in manurung-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8640a52fe28e060a0f2ecf479d23327407883c47e529f07ef6f28febfc69d7dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163759 Malicious code in nudela-fofgaf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 149d11d07cb42c44c68724b356625f894e19c1785420c8ad147d4d9b5d351132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168805 Malicious code in tealoveness74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c2ce04292de4abeb97914a5b2b005b5afc626ae49e652795c4a8f20d9ab0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165143 Malicious code in riyanto-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6503525046658a5117b09da9586ddde38a9a788a102e9c57152cd118c1b578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154634 Malicious code in dian-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4869f77021b5c388b122e7a2e206612f9395111c353f8a35b6428aa304ff1b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c7b0d229753fe340bf1996cd6ff285fb2feb7e3ab86fe52b719f199bdae05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ba02a7ac6ba486454f040d63773da8b3a3f45321483a6adb96b0e59fd003fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...