MAL-2025-167924 Malicious code in teagood-yakuna63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2066c420bd047ac88ace43dd791880b0768c03d0b8a7ebbca7f93faac37a1e61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154309 Malicious code in dia-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd0769cac0a842fd220e0e01e01faa7f8cc1e51330080a63eb0b94900f5bc3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168816 Malicious code in tear-hziops-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a13b1e35532f05fd4c3819ed15083546d5146650ed2bd648b97aa80406cde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158537 Malicious code in lookingan-namakiki28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d3bf05eb4fdaa32134dcd74d99d37a0c98ed39f0b531c4b9ae1899b7c66fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156979 Malicious code in jeep-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960273f881c41ab1fe698040d09512c024df6788f0fb300c78eb4682bd85823b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150079 Malicious code in @mipta1/iyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f77a9b4c12af942ee61457e278a4ca1333a0a384f238ccf0079f2721ebfffe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165210 Malicious code in riyanto-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6446f073a606118bf987da9e0e5e728134f202ab4f2028b5756cc6ab4949ab95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163148 Malicious code in nokire-namiresan90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9d7210009e41bdfec33abcc7efef27552a5d06511605b356cf6da7254893aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161297 Malicious code in nabila-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7813bdb41a5bc0f984f70e85b86476d5324aacf0ba35a0ca15b9844eab03bcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165722 Malicious code in samehadaku-messi-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c761041dc10e35698d3bd7a87bafdaa4f18b1453381a48890148321cd5ea389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162831 Malicious code in nokire-lokcek73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b2a50080d4c7d1a201b20b08140d7d972cdae334b53232d25446033786331b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160089 Malicious code in manurung-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09e60b78485dccff752f182ecc525e1b9305cc226257698884a7c14d17b737e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150618 Malicious code in @miptaa02/ffsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04c48e0b981707d4c16ba42588522af867eb9512ace15f259d04bb91dfe1745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154396 Malicious code in diago-kamoli-lumahoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa615f3db7877cd6ab5b0e3b1491e20523474597efe63579686ccd2a8f3c9163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151546 Malicious code in abu-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa9ae6cb3e6acd0e47432bdc60b0323ba776d9381122108e3a7153919619010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166055 Malicious code in slamet-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afe60758125378f3294d59f9d5f446bf6a66d2e53dab72a3f8e7f0495f19c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158636 Malicious code in lookingan-namakita27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a173ba332785d14b4542d4e289c51742149cd1d71074c0ab20783ad919fff87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164821 Malicious code in rinto-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123806836236a3ebb26cdf96eaaf4861a02eeb340dde0d7b828c26b3331dab6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152029 Malicious code in air-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70902ef95f5216486736aaedc05d335c6ae9f52f81729832bfea6e21b99af31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157715 Malicious code in kuinsu-lki-kopannataiabumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b3149c9e60392ce7dff8edc05be73c1eaf892a9d9c586d1aba4fe14da4b32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...