MAL-2025-152920 Malicious code in astia-al1f-daronoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c214d8e14fd89e62247b8ce6b14c19be06da58d73700d9a72b43c74b8df73cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153805 Malicious code in bitha-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e54e20580c3f7a9cb385ba037ec5daa6339ac2414981819da936f39d4af950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168988 Malicious code in tehah-mansat-buyaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905d38a86780fe50f3ab3bed51b996f3fbbc2856daa47ef8517beed0220ee88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156847 Malicious code in iqbal-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad72580e6aa3d669ce3aff32962a1a76a1d549ec14a6b8520000263d5b796ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160063 Malicious code in manurung-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f4904aedca88a64b5cce2ea162ca6cb156f0bfda0e1a07051155ce838e1b871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166352 Malicious code in sunden-dilak-nulikanukinatain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9ce49a3437bea14499646be40990f0b5cd40800a28e15d61493cd26ea123a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165822 Malicious code in shilang-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5301c65f0d4562e612c49f2d59e396144ab4ae90488e0e5ce2aea888e595a13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163062 Malicious code in nokire-namiresan12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fccd53cff81980ae5e661740c91141c7259ec0246c8a9b136e170c600cb98318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157648 Malicious code in keyla-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c827ebfff9b2763377670a3ded0f1745e11a61da55a4cab827bb1830dbafe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161308 Malicious code in nabuf-ogaf-doifgako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a9195da5a38e009ff929f3544127c1009b4f1928ed40133544e30a0649b5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169175 Malicious code in trevora-cir121 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87105545433adb02dcd0eaf3757ed7c4c20b1daf60ee22cc803808a3aeb3f9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156210 Malicious code in ilang-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264f8a5978a7ee55d9091e1b917bc0d76e71f055a618312a1555e3b0efb00c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-phoenix-hermes-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f13dae0a6b9099cf69f24f905c54a9e0d5e3b7825909735087f068e4787d854d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-gulp-quasar-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ec1782fd94cd2a052595c443f107e56f998bdf4ed021084cc0ac67e769f89b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-wasat-charon-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8812a5f00b2abfe082d0356b8481321b48341d4051a93e24483b59a2c6ad66cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-ganymede-cosmiconfig-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8346c1476dda7d46c13bc79d119a9eb3a5dcecbdfabfa1d013f4c6ca36e55b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-magellan-nashira-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb038937d8f4ebb3e7b9922687f8503ee4277c16c3b7389a6dd6a4e4770f21c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-jabbah-dotenv-safe-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8a3cff783e8ce4ca144f5365873cb4fe15073ac53fe9fa26f546b053cd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-eris-sadr-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afbedbf2b4ed44d816ed2a9def1a28eea2d4b80782ec0d6f39460e743a2a8de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...