MAL-2025-165056 Malicious code in rival-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf4d6afd10ba83c6d12da53c392749f43720b7fe157de74df7ec22ce8b472b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152063 Malicious code in aji-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c5db969213a8c84c67e3baa0096f578d79c1518fbaef0bc8a0b87d45d9ae56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158035 Malicious code in layla-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367469bbbce07290d65898a50ed7692ad4c603e3d3df7ff0b6817a63e1ee3fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161241 Malicious code in nabila-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0469ecf0472465f2c8789b10dd1b9b5d00a0165ad425596dcfc2453b76eef8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163862 Malicious code in nuilava-dakaodfrae-nffamhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7bff3222893dcdc931c4987037f1b374279bbd579d462ef5a4ca40b4c7e08a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150851 Malicious code in @miptaa02/msda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd91cb98351519a06778ae6cfb651dcffe6d96c82cdda0bb4619ca0b14ba3102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158541 Malicious code in lookingan-namakiki31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bca1814b9c1309d0876e5b182299bc2973491170369b0f12f5bebb6ae9629ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160791 Malicious code in muda-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0c02b3d00cddde0ef057810e13c8cf88fbae28ef0c47d6a4d38d6ff6fb4d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166414 Malicious code in sunderlan-ud-vakumanki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf003d1a2d472f9e2bb3a80a1f3b83367816d43decf7196541b37c31e8709bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167055 Malicious code in teagood-lokina86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f2cbd5bf7c76f406e84ddb714274ceaefde23e1c96ad6d22911d140a634f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-taic-alusakilamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd535e79de27cc9e20bdd8b38cccf88b5514ed7ed34ef6717df1895af7237b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c59869b35a5ffed1ab07076045437fbb45d44140775338833197e4e3670eb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytdut-dana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8f488bbba7b111ed3fa75577713f770a48e28225ea68d397c6d1605f26d23a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6d4b4e2318eb60c954f00d6a9371c73e0a6d667bf1c35d804d08b2ae5f6711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uiu-vilkukmbimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345a2aa62978c3f4f0f5e80c6e55f5d25d69028e8917917e856e78f1e9ad7334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76101e7daec2c0f3c5cd9de41d33cc2da22b803899e23405deaa31678948aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyasada-dafdadir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32dcd12b5f69b7d592cf97a552f386a0850107f02fa6d5ef44aea6a7a5dc6702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cbf355535c60fbbc4d02a6de9fc7a829c64e69e2d441d5427ac94ec8e4ccdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1130f9c2fd27622c5b319a15e750a3c9eee94b89701805dc28f18b07d702f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgvila-madasazhkofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5b9361bd2b69dc41485d0ccb281a42dc6646246a5c7ff3046e95340ad6d311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...