MAL-2025-160142 Malicious code in masako-be-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398fe1098bde6f56dc07c7540c143ec5e544478a184bd8e068c6cbabf1eb461b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161033 Malicious code in musik-dai-normal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84d7f217f1a220c5c847305e500fc9e931f50a2590e24f41389dd9b148d530d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158726 Malicious code in lookingan-namala17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e32dcf6ab7016a475111da18d2837f04ed286da8960fe9fc09225149c0fbb154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153501 Malicious code in avomainah-fragas-ofafuafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f61984273c4898f287f6c03125d5878408c9387a9ad8037d3288d005950a4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169901 Malicious code in uinsu-losit-bisauka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fcf01133dc39ecd0a488530b79f95e39e987205f38895615c33d36372bfb6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161661 Malicious code in nabuf-otomabin-nokjgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc637a59dbab10e8313b97c4dfd72e636fbca53d35c5c8fbfff2e596b342be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151616 Malicious code in abuni-niaia-luhubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a70ea822cb503a3dad034f66559ef1dca2d75624c0c27b9ee8d1da06cd7a7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150386 Malicious code in @mipta19/ns-s1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547e43b996bd5dcd3fcdcfcd8fad184945aabe7408287baa2d160ffa1fc711ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167144 Malicious code in teagood-manaki76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d60fc14c74dbec7b8fe5b50b19917ee04a779101607e3a4e43f030d57a37fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152870 Malicious code in aril-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2147c6be0e3285f07cdd019df166d7b17341b3f4aa4af07782901aad8985e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166057 Malicious code in slamet-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7cd2def033cabda4d376f5722fb2de8440a3af8d05f02a1f14d75755c7e6a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164257 Malicious code in piluvaika-kailbu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413ecdbb54fee57aa1f1805e37061853e3948e7a8144a8492dcc4e825a92e852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158652 Malicious code in lookingan-namakita41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae571ef30fc7e47cb90442c0ce80c9e360c5237b3613afa9742360c94918060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158970 Malicious code in madan-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed0076db9d3dd22b1423c0830bdebeee64665e1f0e798eb7c74c6ee2a4066caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167773 Malicious code in teagood-sukuna20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c2211a4ccdf4e4be28919ebc4179de0b215d5748643b84176529e9b0644216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163086 Malicious code in nokire-namiresan34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25c69f71fcaf968f7f5a869b3105f22a63889c1d4fc89a49e2a9987b1029301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156125 Malicious code in ilal-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870f5b4ca97381d0f38661fe0fef0d059cb9fcd4a9d0085404e9e0712d9cf455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165390 Malicious code in sabua-muhuyu-tanadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6efe67a347724c7858b17162ed42eb39ab358590f90832612775f8a7b2074f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-rigel-antares-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be301a42f033b5a9ea4c10f77415df52a52f4f062a65466b42ffb532f5484804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-sagitta-css-minimizer-webpack-plugin-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c8f5b34fb3f7d597c860a1710f27f46ff907e13fbe49cd8c36c11f156f9d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...