MAL-2025-157861 Malicious code in kupa-lubizfzdlio-igugfsdgdfdgsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5242f1637fb971109e32b26151e8a94548f5ac85e67660d51b6d2af7a3cffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151221 Malicious code in abia-avugi-aninah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37fa49017fedf8e29db9614ca86e02486940b169fee931e68d1463b42cef4920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150341 Malicious code in @mipta19/ad-sfsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282608a158911143a7ab425e76a31ff742507c4b57d95e70a935ab53e39002f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150790 Malicious code in @miptaa02/kiomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc88e99c7efe2914af6711e7ab3c4124386e3f8259f05898cdf4d879b1ae01c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170103 Malicious code in upa-lubalauvlio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fbd944e9b439665667c878a0a17e5f41bf486524db3a237c385ea5270c2726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164850 Malicious code in rinto-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998e649d24ef0b6433ef50b1e03e9abe188d3dfc85891911b00009c6ca25b664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161568 Malicious code in nabuf-otogafin-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8267e59211aa6d1c418ebb6b931aaa4946366019c681b33621e0e468d2feb197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165922 Malicious code in shilang-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e46ba008a7875836d6741190945c77d9268541e1b48990a15302312cd9f30ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156074 Malicious code in icha-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e654818457d76440e068ec3d6d2469c3f1d37d56f167ad591f648a8ac249972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166265 Malicious code in sunden-diak-nulama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02be0376a448b5235e35ebd06b7809356c71f1df5a0a7464363ecc421469b7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161698 Malicious code in nabuf-otomin-nosafahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3a192a058d8e727c2bc898654645aa85ecc394bbe4c8d35ac48abdd5c26f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157009 Malicious code in jeep-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00b567594cffcd124907fb88923440d41cf202da40de107d569116a34f6952a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160422 Malicious code in milaoa-duio-nsastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1968ab37cd5bba579758d56cda8a2a10e9ce2b95e61034f9234761b8f417f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162531 Malicious code in nokire-genji42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5403f45fdfcd7e349f42f53de6f70b16db4625bb1c2df988dbb9102ed7afe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153018 Malicious code in aviah-afgaggaganfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ea78b3573eb9bcbc83448a50510a0d272ef4bd5e35b97e30838a4c1260b9d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156831 Malicious code in iqbal-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c15349a6249602c5f661913e8d44048a1a681b43dd27c56967ce5d4b6ca51e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158269 Malicious code in lookingan-konami11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282743ee2d97bce41f5878b236c923d4a2770b002f81ab00e2b90e36b52751e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170197 Malicious code in uyafu-tuftadat-darautut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35604ba7c4fe309c05631a64022f7db05f24323bf3f4b9f9853e94f4aa98ecf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168174 Malicious code in tealove-coki19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b947654fc1c82524855f151369a03480b35a8f09b393ea5afc20bd5cbdca7cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165989 Malicious code in siregar-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ef7abac070e854efa0c465d5b3ee6a7aea8f20b7dc09337eba42e14497b32bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...