MAL-2025-166595 Malicious code in syahlan-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bc083c3e622910954b16b040c42793ae5e6cbe66ebc4c7687add8f36be6505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151744 Malicious code in aciyua-idust-daja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521943110ef0023333d4b90b2fe965db09c1529a89e93268e8461ba23f13153c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161464 Malicious code in nabuf-otimmn-gpig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c408c567d287eef1f5c2a1178f7c7494adc2b855c9992d2bc059ac7edd1e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163902 Malicious code in nustar-miuyu-nutyuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45f89d2e25a2ff074fc853720e02afe45ff56166c0503699802e17512740bda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153796 Malicious code in bintang-tea5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af727aefc9a7460345bdc06c6396b8a6d0d6e1551ba7ecfb6decb08413cddd15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164923 Malicious code in rita-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3d1dc785ecc7bde4c89b83ff0f75f6b1a906f89cfb99338f49aa58f9381a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153686 Malicious code in billa-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07aa5087a07258dd8fb3a5de81b400b496764a755915328d6bb6cfb778f2147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169768 Malicious code in uinsnu-lotipmi-kilar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30f7d6a707225d2d4cf16480756229989444b5523d9e538d2dc29f259ef969d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162152 Malicious code in nokire-abimanyu39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f39a73bfd5ef8278e6b1f8f037d4c29181d91b4eaa45fb99c8e4531cc7a963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164314 Malicious code in pitra-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b78646e9bc6d18eb562ef788da7534b3bd33469841bc136e6709cbadea3aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167865 Malicious code in teagood-yakuna104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5b26da87bd705b92797975497d0b2da3efbe6ca272e765b23c9ece110370d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153172 Malicious code in avminah-fagmaas-admsia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1e3b3503cec7967ce9cf32a096a65dd47d9041d87723e485821efc0a6d75d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159865 Malicious code in mansila-toafgviala-madasalakofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c355ce59762cafd0a7871dd8f3549b11b9c8e1e6e77ea9989ae95dfe57d3dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164689 Malicious code in rino-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2d7bee222e0cd3f87723c16d608c5a72000b0fd131024928fc2fb2281ec505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161565 Malicious code in nabuf-otmbin-nuyasfsgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314953de707ed41a2b452091eb2cdc382f76eea2a873cb61ad2c6791d0af78ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151871 Malicious code in aiboa-moloipe-agigsaipnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d6b5b96ebd2b90409f1854c18ebc992b45227c291d9e85f45506bfb01bdc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151037 Malicious code in @miptaa02/xd2hdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c16f873b49f5e97109c9965c526710098faf50a1c82f0ae095cbfeab7ea5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166014 Malicious code in slamet-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d1e25a1df091a3f397e934b11e60fb97341af4ea648911a3f949413286ec54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167170 Malicious code in teagood-nakama1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83bb8f2172b59c1c07b294120a321150b990a3460a7bae683c5882179e86d85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154054 Malicious code in cinta-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19d0e342ecb592b36912a009e9f3d90ccd3fc0a1076716cac9b08d0e194bf37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...