MAL-2025-154725 Malicious code in dioalgo-kloip-akag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18a6f81fd36562e4e7ddc9a6f6b1cf3be7178b75578174158e9fcf41c65928b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153621 Malicious code in azhar-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2f1d6c8a46fd8254cccc844719ce6d91c511caf1310fa4643e06b3f4c1fb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153009 Malicious code in aviah-afaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031c2e25c6ec02da64071a7d88603710b1563a0374c5b188aa2d52029baed2db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a81bf00ed6327a5c966b64f36d6a64b8f3c0587ccb57708c1faeb216e66056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a335f9b0e97cb47f8f77f13534ec4071988c6ef25886af276ef34172e20e1ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166754 Malicious code in teaadgg-muni-miuyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc345ffbef1cde3213d878a22bba3b33ec867110c882239a569e7d52a1d6bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157607 Malicious code in keyla-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c04d2dce27baf650b45ab6bb757954893aa4d06f0c6494cdaa1b2a8d407298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168892 Malicious code in technical-alnbio-tolimasyur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf863fc1b2564b54f16ccfebae005d14482b74d4e2a5d88951a7c355505d3ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158038 Malicious code in layla-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57721f492b232b48bf95f4fc938c8f04ce6d47a042342553d94ce642b57b716e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155616 Malicious code in hafiz-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e32acfd04b1b18ee1a069193a266533e00f5098f72c976b09779f0bdbba187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170355 Malicious code in verify-ayai-galkia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e639c647dd5e1582f798c675d057d81ee9b96810b799d4b1d327c5c065134d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afoaigi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdc2651ae57f4c30264a33c1504b96742a2715c42d1a517ac7251608c54935d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jinnhifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db62856f904dea1439ddba3ad72277211a4ec64e2f3dfc674f04c74803d82650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e33681413598457813d97b8dcba39cfd4e87ac5d620bc1ea6aa520944c3bfd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ad-ifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f8d74f4ed912b862ca8e0b98d185ce5f7864622d154dc539f85d7cfb37b5fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161908 Malicious code in nasrul-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1224952a057961e451cc2130994a8e599b8046f301712d288b7d3ea15ad7e339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-codfd-mantap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27ee16afe705e033f8d2462c9b90ca36ee861fd78772569d8f3ed700ff63acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-nodemon-sedna-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7316b299b527b2a7aca15f930a3fdfb9a75ba8c6418bd1cf9278ef08797cd08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-iota-avior-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842e087fcc43bac6c5e943ef3f5d979ffb2ba3d2ca75b0a413ad72b3d83f8cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145084 Malicious code in mocha-kastra-proxima-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3131eee4d05ed3a50f61cb6e00d4d6458940daf667b3ecc4555959c89e89c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...