MAL-2025-160050 Malicious code in manurung-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 315bb9bcf58df303f82e12639bcde84be9816b8c471f49df5501bbcf0ef81c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153008 Malicious code in aviah-afa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6c15d22cbef7c0bea26c1e6569bdfeed4a66c0f3f6ea5e9347fb4eb384265d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155866 Malicious code in ibanuni-ota-ufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457aaf558bcfbc095704889febcc07fa1047db928f39da89b17f3d17b1b06bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159011 Malicious code in mahnud-fuaf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2aff0e1d95981998af3e3d973c7519ceac7266aec1aee05542da8eedeaa4b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156498 Malicious code in infi-gafobai-jagoitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1253ba3abd75e28bd2ab8f9df0cb1a59c1139100d3f37e5214b8d3e2993359d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150826 Malicious code in @miptaa02/miasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045904585d2da9c118a652a5b3eaaff12232d5485036441291887f7886a6a48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166686 Malicious code in tadashi-tssu-tsud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6d8efcc622e5754f7c87709ecfab82e56ab642d5c7f04b9608045bdabe75fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161459 Malicious code in nabuf-otimmn-afqofga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510552e9358d49e00c423df94b90fb5ee78266da99328f42ea8cf3a460aa613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158826 Malicious code in lookingan-namalaka17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06d762795b586263f5ba74b5c572577ff66bff6795eddc280e6ff3458b8dda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169484 Malicious code in uaragia-mudashai-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d993bec8674f897197b8d776b05d780e6ce5e74b16024fac6b06f55328d17d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163731 Malicious code in nudela-afogsaf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e05650fd6cfc33fa8be8a931fa231ada369c1173ca85bf4620c7d2e98df0fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159392 Malicious code in manadsi-safifda-nasisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecd46e29dbc1be5b3895d179877966ee8d3743597464d42858be3d56698b1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150709 Malicious code in @miptaa02/gzfue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1f43a6f2a982ff1fd95a9c61fb097697665e099f31650e8e844d4c2cf67890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152418 Malicious code in alvino-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13d55c4c8740d37d2a3e6a453631beab1dfc603e345f64de5e6784a0530c047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-levels-izar-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84eff04b5c572409de5edfc7288ab325e0b895580f68d2370bebc0b185e7edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-ursa-process-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108481acf0733a6dcfa4494b50cff9fd397842b2c03148422adf1b8d22d76315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-commitlint-enif-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7e9e5034c33ac7fdb51b5ba408e5fca69992dde96949b71cc5cae885249096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-fork-cassini-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5034f07878345120b3e58d57a392ead084af6eb7f29ec57084ae84861f00c8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-pyxis-wasat-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9279999eb82f4ebefafb993331a9b1d9cc9bf542060779f1d7b327051dbaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-envconfig-equinox-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d82cf644f75bfb47cbabc64615e3caa508d9bc4d7f83845a2ff472647ab4fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...