MAL-2025-169809 Malicious code in uinsu-lisa-am (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a999cbd24965b0863094c3b8b0fa31172d561e44e9d2c10d9fc9c6eea17deff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156022 Malicious code in icha-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba0864264f9835d2d7482657c48a3de449c89e0acf1ca8c8039dd2f94569732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167198 Malicious code in teagood-nakama33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbb782b66757afadc258ea55ab51ed6febb8075e62a6bacc0b81692efb8b6ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161280 Malicious code in nabila-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563aba191040713ceeb2661330b13410930f60a56b25a89248261d364cfcd4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150832 Malicious code in @miptaa02/mijaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935d4421a858f209991a2603c0a46309f27db889f0a63cfcd0e48a4847185c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154810 Malicious code in ewa-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c475483559feff1e439da295ce5ff5ad50a484751b7fa4456ff1bd377f3c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151517 Malicious code in abu-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c134254f2563763da6837da5b1f5ce9873238f6865eca3fabcefa9f186696107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168915 Malicious code in technical-aloni-tola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153be9d8dc3fc93bc9ef10cecbe0649e4e1a2730a793fe612078e117dd55aeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157539 Malicious code in kentung-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147657fc5f3d50d0a9509e492f396dde6abd313d90ca74b476a3306f4b775df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165677 Malicious code in saku-au-idaduasauyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4592acb5f837f8a7ac1e3e6eec1ab3b56d7d5d1347252fdaff9c08979f64b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-fafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbcc3e4da6f176c2e03123a2a1e7e9e3e11592bac1aefa5abaa7e618fa5620b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3934e32f5ef13e68e96c1d05fe46386d5abee7f443993fdb1375ba3e08e762c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a811bda597ef572912a6a8882c2fc79ccbae68b60aa392b16538278c66de1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165456 Malicious code in sabua-muyaig-bfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8091edd90f5457f2b8ea61a4093d5b125ebb3e7468eb98840e2a9b7aa62ba8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124945dad4d6446bba12ef8612281ce71c50ef5b9dddfc5ec3868c62043543fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-hzips-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b2aa33072ae60c7be79988c7015e3120f46ba4b984cdb07cfc8771209f1d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0f9126769a4fc874e878b67d38598675e7b5ee0f3e4e4b91e0104593cfe8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec0182f87a562fb7d8817a494e7792ef7f1b9e7a291bd2e45423c7ea795328b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makaia-anifama-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db66ce58bf09ae7e43ce8f03f609cfec783b01e3b80b36eee73ab89b82095c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c350ef9edca6e4577ba3a7a3af97bfdc483a59c72dabdb70745539ffdd4965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...