MAL-2025-156254 Malicious code in ilang-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae69094bb1e53fb2135a30ec5fccec7641c0eca21f6095e92e18b9e9b880c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af0bcd920532c87514b8548d3d55dcf54b350ad3b1dac8f1ae91c5ff0ebc7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152829 Malicious code in aril-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07014c2851dccb40940d706d274e4f9012d7daa382856bee88cf59d0788da348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 370c5a305782a072e712a82397368d0d8d70d121c7ec8e8015cd7d1d8fb82516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-aiusamakli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60aed786bf21245d1b6de1cb96b27d1f284d5e9650ef5d5155345931ffb70fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c026f1ea7bd9d829c4161e305da4869e38714e11060a85267b5985f94b1955ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151238 Malicious code in abiba-alufuai-ayvaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0552ed2bdda8f99bf243d37acd7bab259314a109bd7b6b4bdb0fd392f88f8ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160223 Malicious code in matane-cookik-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f58dafafe3267fa12460e78c23e2d24d738c3373310f9e904a4b37f8696ea2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152600 Malicious code in anaisilaa-pafonolai-asigoga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387903c9e0fde2ce8deaf7b7372166044ab1b94bb52c8220ba990ac4cda75da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162340 Malicious code in nokire-arhani29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a5fbd84181b20bf316b17242d9a46ae50b9bd1a2d89798bd68c85a8e3d438ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152127 Malicious code in aji-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bc540ee9153beb7d5a37bf8c9786290d23110bdcbfa87d24cc88c4623f5383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168894 Malicious code in technical-alobiko-taovilanaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89bde7de91130274e10d3a6940cd6966c30125ecd519ca57b01dc557c4951200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactiva-mechani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202fc4820df6c41516cc0d02d083cad87ea1e0b7ebb2247eb9e26b1b0ef45f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-via-teajawa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82268b81e4689f6e6306270b2c3b4bb3d509293f2038d2efdc729691021347d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a170721d153d7dd0c5aeaeddcdb9c5b61743414226f18c1817a023810ab4e81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152979 Malicious code in astia-alao-mafadiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053a313b5a3ba92638049004049563cb2852b499fff8efd3e2653055badca1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-bellatrix-celeste-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9751a8f461ef75356eddf22513134bd4061a94b1facba3c6c921a8f816a09c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-mdx-promise-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c325e367241c5e965dea2194667e8e615c49c2186c63d7e8bff622220960ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147336 Malicious code in resolvers-sedna-callback-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bba612a2c27396bdd6c0082f37a7b31d445c50826d26dc620a866316eefb7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-concurrently-cordelia-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f37d1a61aeaa8f56ede95ca5d882127a27805052f7d01472844a30ff0ed9d2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...