MAL-2025-157924 Malicious code in kuroichi12-men-spell (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0166a61111ac03a813b039ee38cee5b8488021fc25a68e33ddd71daf70d473e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155681 Malicious code in hariyono-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64be2ebd1dd0b2ebf1fd6def742ac602cce18ea154dc45155bc2631cf175232c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165085 Malicious code in rival-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029da1546e03295e8b4ad8f111a87af149f1201dd69f9c65b23dee13ae2235ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162859 Malicious code in nokire-loklok1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024b1940be41935a838bb0b4fe6882c632a8f154962625fd24c898c8fcb3bb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alo1f-danaipik179 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1b1499071a36457661350b073c96b55a5c537b47628d3e8d6506f1b51c529c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 056907b947f59a90603997911ae232e60a613d5eab1664598ccbc6dc593ddffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6733dfb67c97285ffb1338bab4f7f58f623ff56242cac53a17277f6a070c40ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6da62fdb9d25b2cdef5f42214fc658b73da498dad6f3877190e5bb85ae976d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scavior-ado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f87902e407fcacf77fbdbb7f9d9ead2f4a8c62d8401bd74b6caade1a69a1287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sxj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21275df9f55575cb5e9c72882e1bb2b0f7df5bfbab741af0ad092e26d586778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164773 Malicious code in rinto-poke119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7ab788ccf7d030377efde3f8521f58044ffb1bb267a963a64170e3ac045c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169999 Malicious code in uinsu-loti-babiakam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26136167d926857230b84a5c7af942416af7c52d08921fd20fe9bc6a3ed7c507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160498 Malicious code in miracle-diook-ujaaik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b611a6c5f52dfa98616543a9bbc770ed1136e4170acc94076da11713fd1ca5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166563 Malicious code in syahlan-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc654884fc8cc1c29e7a9db540933926165f6f6e984ff576e0df773307fd25c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158372 Malicious code in lookingan-nakomi15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c2b5267e0e67f5f8b294447a4ab9b9276b77e050294ecc8e5cf0571a7ac8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156690 Malicious code in inufgi-gotmua-anabzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe487d911282e37bb82cc6497ac3817d1044cdd34d35f7a6f4210056d3c577d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161711 Malicious code in nabuf-oton-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c80fc74d5da7fc8ca61d41a55b3eb5d86d1b3485b894959702d19c26093df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163803 Malicious code in nudela-ofgaf-gafohagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100226555d0b4a91de69298c3fff2af9c9bfcf2851c9e26918435378d67156e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163620 Malicious code in nokire-zenitsu32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a9a7fe47fe1520754a5eca1a623ab97e6b8b1713d952884ceed03fb1be724b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151171 Malicious code in aben-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3adae7c76a82576585e8844138e6c27550bf67f4344a140f647bd1b469ede8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...