MAL-2025-155876 Malicious code in ican-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da1f4885696f0289cf294560ad650f948f6077a1c608df07f1445658816f84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150703 Malicious code in @miptaa02/gzaeody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1402f626c0bcae362dfa0c60892dd227b80d82a4e5920b0edf7d50d7df6afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153313 Malicious code in avminh-afagias-ifadfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30209064e6ff8a3b435f4b7286de918a51b8a3f1002adbba4d80cdb5428caaa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154362 Malicious code in diago-kamli-luaquak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6650b83e4ceac1bbf43f56a9d58e4c349c28136b84d10760f42c96b898cb708d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163829 Malicious code in nudela-rahfae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038ccf42158ddf7e6ebbc9b05c93b66a83e4a37d6a8b513c6ddaecd280d26a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159510 Malicious code in manaf-asin-nadbsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e37bb6ddc73155edaf4d8d481f386f37e70cfb50650ca9d666ae27d3c4896e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153671 Malicious code in billa-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11dc7521421ffc54808869eb79d682fc767c75870a365f8f3f06877a3023687c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153226 Malicious code in avminah-fagnias-ifiafaigaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86375aed69049c717187680cb85aab751f7b68340793486ab562e5942ee00c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36af852a1262f68d629a49542c78fdfb98a5e72d9c1ca9af6452e9590ed6319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7402f79853db80dff11ee51c526b9f8d05dc5baf3a6b8dfcfa04768c5e797a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nitroacer-teajaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000ab5e1dc60fc8d5ecc2e747a2c89ed86f2b066c74e2f83ecd1b85c674725fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgpfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbba9737fdcc7d4b7acadafd47cf983cb34e1a4d03540c9f489464c8b77c0b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al12f-darhaso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544b2f0a06b68d70a34756be6294c0007df861658e217acfd4d48475ad6638b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgaf-doigafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ca8a24cd39f0f8d55f02030c55482a0090265a2dea395d76e8bcb7caa1a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a92aeefcb5820e7dba65207fb7f383ea48d5ffb3d27da9be7003ca19d6331d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aloni-tolakui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d408b0d44b1a0292f69ea6010319764b137beba82b8605636cf902ac3fd1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-ris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa16f97eb198210051444da141cf048a363b2475d3639f831814393ec98efb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulipo-luokafamaahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc43d7cc8656e3097dbb245034d0af0be83261a7cd3a9abab7524b42fa2a345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/icdgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5c062467e809e18788002d26e2b0dd12d053f8a8609bf1bea2690fccf0c48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60babe30b153eb9bcb321ec828af409d990819ce3ee21bb07993b2e00665b2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...