MAL-2025-169696 Malicious code in ucok-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 718f0b8f117209fe047af0ebf788deefcd47f6455d9246d21ba1d9e61fc5ee01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170270 Malicious code in verify-aikn-ukasiamisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a152e718e71c625b11f614e321ab16f25838e411ecfa4ee5cd7b661c81fa84fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158690 Malicious code in lookingan-namakita752 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5035f8edef7d67a7f555e0417ec5c4c4f752cd5aa4de896d714a0e965cda2a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154547 Malicious code in dian-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273f48b3e2c92a516a2122517ea928e069cef2cbde80852286ec7ad785f1fb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150985 Malicious code in @miptaa02/tpofkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c4fbe4241a315d25293c537d9303511fec2fb011ca865462775b4d5837089b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169479 Malicious code in uaragia-mudafsituhai-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659e148dee41e50b8a8bf337d1ee2a69a98ad6b9dc01749cf68298b76ccb8256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155233 Malicious code in fitrok-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04f1ea9ca7d327aaed6ff62e52076088730f8a4be4fab0c3ae14be16b58c8df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155300 Malicious code in gifa-ota-uofigfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 848448d854a6a7f1f0ee11dccdc80e5ba895de24becbd44407147b3da6cdaca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153902 Malicious code in bni-otaima-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf427762390d4f7dca174617178b5f74ee74eef3b27595c98494933e8f722a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150036 Malicious code in @mipta1/gqa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fdea1cb25b3477dfd8f78a44abfe9c67c1dbedded2d2e64ff13e0cd8755482b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169762 Malicious code in uinsnu-lotimi-knubasilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ace2b4a2e97299aedf4a7255c3c04a69b65cec0a8371676a62466c1c6798821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169978 Malicious code in uinsu-lotahi-nalu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c9779c7cb7cf3898c1985689cc12367f27b372cf2ff49a90a85384210b6f8cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161208 Malicious code in nabila-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5cd44138f4597c580b4fe5ac070a66c7809f9f165378106d662abed46d0c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169033 Malicious code in tehah-nutafday-kob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82369d6bbc04645650f153877cabe29ba47cb85bd7ef25f155b0c399cd09d0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158077 Malicious code in layla-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a71a5d7677bfad7331213ec6c8f875a208115c94471b538b68ba846ae9728fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148411 Malicious code in swift_dragon_green-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b51fb18bf8430096563d6f2aa932669cb667a1d81503b210fa97f967a97e3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149902 Malicious code in zoophagous-coffee-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a39e55430d666ee64d48b67fcd7913f31dcaee9f2e68464d65e3ebfe72fc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-thuban-mongoose-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a38b52da158ae13c533abaa878bd0546783bdc722f4e37c25cb1f7735c7199a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-hapi-webdriver-manager-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a03bac90d0287512c2d43ae5069080023ec831c3459544aa0a7b576751eb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-markdown-pdf-altair-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573304594207ecf8910723db18dc49d6e07edd5c5aee43c6a5ddea60ab7800f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...