MAL-2025-152872 Malicious code in aril-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 237d62158f75fcadbb2221954397122b6805bb61fbf9c4ff2c558901b1efa90f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156518 Malicious code in intan-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176c32666118dab61eae8882aeaab57b8a89cc0dcf70c5f43dddd7ae4e2c39b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157763 Malicious code in kuinsu-luki-nasunnabaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf1c6bb742ca0295428f98c54076f64d4d45ef45472257ae701dc8babcf2155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163775 Malicious code in nudela-gagagg0hf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ddebfce82ff997473f97916c70ef1ea5744c9435bbdacdbbffb269f12368797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168540 Malicious code in tealove-nokire13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf17007de0f552547e486c7e92b1b7dab71fef06d002448929faaae7144928bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152341 Malicious code in alita-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9e0be8d52bf29a688561ed923d8742cc68b0fcfdc55bbf3eba0447fd642664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153226 Malicious code in avminah-fagnias-ifiafaigaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86375aed69049c717187680cb85aab751f7b68340793486ab562e5942ee00c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158358 Malicious code in lookingan-konami92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def23c205d9e1065844ffcd01dc4511e0bef615327ef692f86381d4573680e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168893 Malicious code in technical-alnbio-tolnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e0805ae92fdcff4564fa1bbe21003c1ed7c7ce58f7e9c6408fab8425f7c571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2811c93e100b5c4920e0554607dd18ea30bc6336ed0a10fc400e67209d93a28b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gfobai-jagiafugr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a5d659a6243e338c29e602aa6c22210f831ed925a7e869067d908078d1ca1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5320c27f8a8f07a38a26ff12cfe48f0d043308fe363542d58de6d10e4557c667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/sscseh-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b5718412cfe8b439f5606d581ce30a155161a8c2b78a05be94033e1a35a616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36be06fc14baca294c612538b1d3bdabbd51fe3d2cf459111b33531049ed1cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbin-nuyasfsgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314953de707ed41a2b452091eb2cdc382f76eea2a873cb61ad2c6791d0af78ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vuma-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 779dccc7e2c2d7cf97106452251e6b05a2e80bf8e09fffe485d14937dcd84515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutiasfaft-msiuyu-masdta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a575f13a16d125409d7730da0cceb5b09261136a82e5a8c551a7314e779c46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595eef2c5c8f3a35f87b7137436511610bfa4750e62f01c4c381dbce1298fc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0df20e0871b42a2a681b89eeebf3e7aed4ccf0168a8af36f704b08885d441f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safadid-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbd3fbc8e666ba2b0d91761f9c7b13c31c32c4abce4e5321d2aabd56c2b9df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...