MAL-2025-153752 Malicious code in billa-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5798090967054057282c55ca265c21729eaf9c20eb96e635109b36dbe202f11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169852 Malicious code in uinsu-lista-atukamunima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854601b4f884807998a4a1df4e9ef9c021bbc491f449d11587aaf1463638bc9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168181 Malicious code in tealove-coki25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ae1e0d7f0b5e41d885e0a0010dceb4ee6868f758974d454397e166ecae21cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169992 Malicious code in uinsu-lotaihmi-klu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b219643f1e884967860a71b76e84fb075c4172044242691b6ad0aa4be137196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155046 Malicious code in fauzi-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13cdd3784ef6be80436f75b596ec9a11484d3c5bf74285d32489cbe279bd979d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168142 Malicious code in tealove-boy35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c12dce88f504cee883d05c4de542f591dc730a90490fbcfa85a15d9783c332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150768 Malicious code in @miptaa02/ivah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1fb6b26dbb0dcba4ad7c0a5786e44432b1fc038ef9239f9003f331bd4ed10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162748 Malicious code in nokire-korean17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad5ed199c055c2aaae27161a8ec597a4c896730c39467689ecb9d2f7d942b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157437 Malicious code in kapai-safoa0amaa-agda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af03fec4df9fee8eafaae1ea913f31d520801d25fd94ca57fe841b2e02b71ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167166 Malicious code in teagood-manaki96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8786f317ff4a7d189c309108f19146f67534fb4a691e513d866eb507e595e50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151579 Malicious code in abuh-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3159bb352d8223e2dc55d58d695f19a38100ec35e5220b2ce5de1ae15fa61d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159261 Malicious code in makani-aiavamoba-iufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38771a0abb45c53478fdb403c0cd9d16ab63310066e512b1155a54a5226f331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159262 Malicious code in makani-aiavamoba-ufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425d67ccf559a72e266ead1cacbf6131e1a102a45bb93cd93a2b84a4141a2464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154848 Malicious code in fadila-poke115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdea5e7f91789f439d0e662e550b4c560b036cffd38f5992178d14aa317923e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164909 Malicious code in rita-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d47a128f71f628e3d7917bce8d4a10721f53b1af821d0564434f29f18b9b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165065 Malicious code in rival-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d16c49f3f372a11e7d39ea2e78307d850bf3f3e07f5a498a60884dd06ea5554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162363 Malicious code in nokire-arhani5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7966a9fa44453c615e2b4a36215616040258ccb80a01717beb3df89bf6bf5717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165131 Malicious code in riyanto-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b62189aae1c054efbe58357e44570e281ee0acff1f16b1aa9aec72c7e66046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165817 Malicious code in shilang-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 864cf8249e8eb2ea7f13465f4368f2597d82046404af377c5591e94ec9a0b524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160515 Malicious code in miracle-dok-uikayananbuamabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7b2050298b1282f272f246713a836a401262de59fee7568b75ffd6ace0d0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...