MAL-2025-165774 Malicious code in sau-naki-iyuup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ca3d493f461520e274e6c284fc7fd325bc90d31cd5669ce6d489bcd8e890fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163995 Malicious code in parwo-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fa560c44fd78ab2c53d6ef181f03f595bcadfd5f38fd903fc1949b548b8096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169218 Malicious code in trevora-cir25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea7341fc30f85f70ba33f58de39ba868b7fe5e64a20ed85b1becef1d74be29f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162681 Malicious code in nokire-kilua87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242be90fcd1ba2e4b5356312844013ebb517a9d30517217257886a95437531e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165895 Malicious code in shilang-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397d52ee35ff748e3ba0a2f99213ab7f3cd102320c6fa7f6e1f7812f26399948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166904 Malicious code in teagood-lokika4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c90f34be14e3cbb870ae5a16a59584727dba3d2c6dbfe84561fa3ad3864036a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156400 Malicious code in inal-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2364bb0cf3345eda4d21f886f6d94f6d836f1778dc9385ecef31b7496d953a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162877 Malicious code in nokire-loklok25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ea410f1e35b9b184d0a1e54c21d89c076c3016c5d673b22e47581b46e5b253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167318 Malicious code in teagood-nakamala52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc4ad325a18a1ef3d9599e1ea5bfc4f6e4213bab307f2d0770adfa96b99c54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161307 Malicious code in nabuf-ogaf-doifaogako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a07c7467387fa2baa2c977d12c2b6b48f17210f12721e9f19ba2c4be0bd96cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165427 Malicious code in sabua-muyafig-budaffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29dccd0c1b791a08aace841e9361d2990ad57a57b855c5f39d30c1fb33469f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170575 Malicious code in wulan-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0df05fa5e11190477b33eb6ed24426437898ba498bbdeeeffd8d7ce17500f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159783 Malicious code in mansila-tdhfla-magahboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a18528cb35115c9dfffecd89773a256fb1059eb2f14b738f63a79416176c806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152395 Malicious code in alita-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1664be0aae009320107f356a6c3558ae4efe03b3996be68d679e130533348577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166255 Malicious code in sunden-diak-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef35d39a26468cc8fc51788a95799ab5b094d9b2979fa05e5365628583f4352a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160004 Malicious code in manuk-nai-agamiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b4a575f19f51d48d5b204d7a3c34a9aa22b3cfc370de8340b4c1b637cb1dc3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157414 Malicious code in kapafovgfiano-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cbff25f3c6b8cf3d57a10cd88e07cb6258d0118160e5c77e1c1f5b1eb62e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166696 Malicious code in tea-oss-mirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f31505d055428a0a5643fc7e4b771112fd0ef022c9ba9dc2529c6e06dcb4f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164055 Malicious code in parwo-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb8dd1d214948ab67d8c84bbc8b25083de5ffa0468e4422402ac0181bcac9f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154258 Malicious code in demaf-nuddaya-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66ea89d1d6253d9f02d9ac1d9c64d4310df70cb7d5a4128341698c8cab9c307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...