MAL-2025-162817 Malicious code in nokire-lokcek60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71c06686f7467641b78ef716b5ccb0d3b04c02a1a992c931c61dc9f2b91740b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170169 Malicious code in uya-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5032a1512e2046772e454b14d55388aa727c247a02019ca7029123d7cfaedbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156273 Malicious code in ilop-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8e30c41cc7718e3449348d4898e4a98de50b7eb98ab2e1e74ba8b8c7317179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150671 Malicious code in @miptaa02/fshg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ef14016babb38ae9b908bd128172debee2a2607cc864e2f0c58e2ce55019b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152700 Malicious code in angin-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4d8b02780f2c5878560478e5aad9cd4464fe84e3063314cad2393a44c46936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159433 Malicious code in manadsi-sfadia-madav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c448598c1977ac9bf4d492d662848345d970476a0dd5a219cc820963a31949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153998 Malicious code in car-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57559255b1173745ddeb1d9e450ae3f92f7c59b4122373324d3a4ecb3065ccee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e54212d9f39e75d89d1ce6717868d02aa36eb0e930ccaf7946ad998b198216b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168805 Malicious code in tealoveness74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c2ce04292de4abeb97914a5b2b005b5afc626ae49e652795c4a8f20d9ab0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155158 Malicious code in fitra-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638290d39741b0bff7d8f82cb35434b6d14fa8091db6c13ad218af335276df97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuoaopa-muyafig-budfaiufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc64ab1950d93a41ac83cb8dc8b650019b05ff82484984bd9a702163c9888c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153396 Malicious code in avminh-afgais-fafdfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8366a894bf3abacb3fff7133e4502b4a5a05d3cdc8734ac170d1887b662d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154304 Malicious code in dia-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa771970333a616dcc0a3b6d59a32b3eb2c070ab6d414ea7c734417c4b48ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154634 Malicious code in dian-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4869f77021b5c388b122e7a2e206612f9395111c353f8a35b6428aa304ff1b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151582 Malicious code in abuh-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d6f8e44d1a68d959a0802ebf0ffece5da4ec196d0f957ac11bca0c4f7aa9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169341 Malicious code in turisna-gsasad-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7531702227b16e1e1694131eab8bcf21bf08861fadfe30f5df6ef1faf46a5f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-elektra-tethys-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd6a416be129d48542f77dac831defe147dcb7b21c8048a07c1b70bcabd3b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-altair-got-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a660fc5e738c8d00b5f3881d89852c995e28e12b38ece3a1ead965d679ec57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-slidev-middleware-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344684591780ddb2924ad9c248fd8d91d956e9e4ffe38df0593aa3a037c0a957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-meissa-nodemon-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e942da9a59669fe15a93064e91bc37ff7096685eb34fa16ddce7f223f4e9df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...