MAL-2025-151184 Malicious code in aben-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99ce5d09452810f585809b0bd758b83bd1d2601fde4b2cb997e4d7807102836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168470 Malicious code in tealove-nanami40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e5f55d5229d8b6a4f2af5caccb49d0364e157b8fc262c112dc88276e5015ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170181 Malicious code in uyafru-tuftadat-darautut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b512f6e520cb32e99150c97a6e762d459aeef2f8e4e7ab3529a1782f6b70e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164605 Malicious code in ramadan-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff11270ff8c6e628dc70950d95e6e0b7b02d67185b45fef7c16426905b5fbccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165420 Malicious code in sabua-muuyufafu-dafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5d4ac5ca119f68c25736ea93ad315052b5358262d0c73b7886088001c4054b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152916 Malicious code in astia-al1f-daro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7001febf50e6a56ab8e927ad8dfe7e04333ed28a121112d0f60dee20fd06dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156240 Malicious code in ilang-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0eb2062fbe6f235c27db03e6c37e0f562b0516ed12aa5cc7c0dca91805d52f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170503 Malicious code in verify-tayic-iamsunas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54adb31583745ff97bdffd5823ee174e01eeae1d200108a7d9fdcffd8ffc8f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165610 Malicious code in saku-aiaku-unusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cbe0a3fef7b374d9645dd503e5eaf3cae2f30f98605551ae69983a196387a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165385 Malicious code in sabua-muhuyu-tadamafdai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074ad429d53e6910d2352959a2653c76e3c119215d707c60a2bcfad135bd7136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162683 Malicious code in nokire-kilua89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b39c3ac801ba65c250b6ba5e8609f37c201774a36a694ba84cc74046592a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169333 Malicious code in trevora-nisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29881b94f54686ff1691b73d0bdf2473894d277de6b68c0b6e99356c243d36a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158884 Malicious code in lookingan-namalaka7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5ca4b313ab00918b1cac3959fb7296f997e676e02c400981a3e0375edf3d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164520 Malicious code in prayoga-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc52b60fd7470e4305abde2b6292d733b06abc7dfc40e3b825adf04f936f9edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169261 Malicious code in trevora-cir64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0efc3e1de40034e29535082900eb841faad50171c191588da50faed2c9759f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163973 Malicious code in parwo-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428d2aef945e838feef4b22572f144d733132fa2d7f4fe138acb9bc4cbf54564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157453 Malicious code in kapvino-saaa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d5353690a33aa86aa0308213a1531915cbaa155fa3ab45d25b26fe04e765c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156518 Malicious code in intan-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176c32666118dab61eae8882aeaab57b8a89cc0dcf70c5f43dddd7ae4e2c39b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150080 Malicious code in @mipta1/iyug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08cf248796e5310ec3c2669b74f2a8e5bae9fe14f9a49bed8822b7f98f12c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166438 Malicious code in sunderlan-udk-vauki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf82f385a59988c6e07d84bfda35cb63d8a48b534ed9bb348c0a09e1d2d492bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...