MAL-2025-162097 Malicious code in nokiraifiagne-asaifai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a33ff9ff55e7e0eac4e8c4038d21db2c058739f916fd72325381996f148c65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155103 Malicious code in fitra-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9f00e23232b5d81776d42b4028c3d0d511a83be3c0ab339a2664348875638e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160988 Malicious code in murai-burt-sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b0aaabfa75a2e7f68ba5e04d1484a7f7c6dee0a95563ebd64162a386fedd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152858 Malicious code in aril-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b5b220dbe292bb72d41b8bf7108cb6dba96bad684db31162f606abfffd5fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155931 Malicious code in ican-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7284e37ce9bbde84c5c1f9c7eea1093992bc9bb2744d71f5d4625a0847a226f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159916 Malicious code in mansioda-nomiaduai-mufngu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b5686f1fefbf51098cc0f725e9539f802f795389b5cb10ffe27dedcef45718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158037 Malicious code in layla-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c744cb5203fe0dc73fe286649f0abff0d9217720b86be6fd9ffaaf8ddff1603a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157785 Malicious code in kuinsu-lukoiki-nisnutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ec6c860b856ef9058ec41b97cfba56f784f93cd0f9bfc285bac5f9396c27ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164069 Malicious code in parwo-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4da0e380ee08f570b8c8448442c68e759df7414e04f1bc20053e240b323d489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163315 Malicious code in nokire-rara28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea311ee2d76507a622e36b6913c6343be15549ee4f7ec1f8ce34eb198c150cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164014 Malicious code in parwo-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46f41fa14f6680856d0a4ba42541747e7d25bf107ee4fdcfc53dbd5fa4700d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150923 Malicious code in @miptaa02/riyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd80e45df3764d08591902547d415e22552094dc0ccdcd2ce2ad49a80e10592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170585 Malicious code in yuda-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1380d73e04c8ec46e13353f6d901694eaafd9f8523b6cc795f411ff48b93e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170347 Malicious code in verify-ayai-auioanyaugial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce96d99719f1401b082ee88820491cbc20acf39dd06497ac5b5e0b80e2eea42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5af8bdf1f6d9383aab9504a1c9ea5186d41166e2246208590e1681b270ee53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161852 Malicious code in namase-mewekaty-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8dc1a70c0faa65a35cbefb7032bb871f3f3a6018468a42047238d4384e3a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163827 Malicious code in nudela-rahaffheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5514e3990d02c423f5c0d19f50e8dd656bae0002f7c659b988f3bcbdd176f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168678 Malicious code in tealove-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274c07fd9e12fd1e06849fe5a20f93753cd1e3e3ec3077b2f08e48eb2f398e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168268 Malicious code in tealove-darknest13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa77ac480111b46bbfe93d5d1a78d82b270e596ba5cfffe16dbd6012716a4bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156043 Malicious code in icha-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ad7c458f673f3f1c1836e7ce5f7c0205cd66fa4ea803e84d8f43bc71faba2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...