Malicious code in kentung-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c44d176407d4da9e7089ffc57beac03e520f4b3605991078ccec31250d5b2ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155109 Malicious code in fitra-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614facafc357a4df5d3932c2aab6b5a7660b7d7496700597ec3d654e72a4d3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164808 Malicious code in rinto-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca7b3068daad6d2d7fdff23cd0533f6c6341da7eefa94ecff3d6cd1c5e747f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150201 Malicious code in @mipta1/safd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cf6f6f565d607e067ebb0d5c4c989db7544f80af61160fc38c2c3e4bc482d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151003 Malicious code in @miptaa02/waht (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017a64e536685a1ee7c63003446abf490ffb4f3ee8b26c226f6a7831d1b86854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168013 Malicious code in teagood-yakuza54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8840d7eaadd09786ca7b4ca38cbc2304a1dd5b32020830def7f46a197a9b9ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168429 Malicious code in tealove-nameka45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abafdfba33ddc3d6bd556dfad44931e6d2ee8c3bf02f0d4564809002164a9f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163937 Malicious code in pajero-cir1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85de9e368006825413b6fda3771ab4a9322fbc2db48d84e836bfe7d28e6558d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166926 Malicious code in teagood-lokika6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b5419af8fc5795c6456284fdcf828289fbf1e60f88f10de59228ecd4db2a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167905 Malicious code in teagood-yakuna46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5418b1eae4a1b755192d3aa29731520fd5a874e55adad23682bbba8223d25c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149917 Malicious code in @mipta1/aisax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078872005200292f4cc50ec8814787a3910dc95ac01f512a0cf99f8432b3b959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157358 Malicious code in kamasada-nutai-kyased (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a629937fecdac8487bc8f413a3331ddb6ecc5b2ef06bef59820a7c52b6c83d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muuyfafu-dafumfufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e0e7b43c9047beae4114c48629204b17861ee3a03962c3e5556fa1fa2f8cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-spinner-hermes-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8302d0741db7d221e02f8e9ed2a744e8586ed4f7241cb1249ff6f197772e806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-metalsmith-kinetic-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878d6af5f0a46610edc9311c111f32eee574f8f65046961c73337c1f01e83e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-spawn-lynx-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bca2ce67e69c781a2f7322159d6df5b7e238d726cee97432e040ca27711aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-gulp-lynx-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddfd9b7191654eb3387ba8d4a8c42bc2d8f476f01b89d97689ab344c8dc826f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-config-pyxis-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33044e97e3977cc09085f4cd26c4dd79e15812db77ae419ce12855b010a0d7c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140349 Malicious code in callisto-readable-europa-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9db60a5246fcddf3c7698341dda6b5fef26f7659978b69669b34dd4547503b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147358 Malicious code in rest-nextjs-pegasus-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2395e16f16fd91bb12bb0f7ecc86de9d718432c37009b24b2167bd90ad6e98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...