MAL-2025-156262 Malicious code in ilop-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa471e5a54a351be2f9471640d90aafeb53d317765227fad51573989f840e342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165941 Malicious code in siregar-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d6c48db1f05e68a38c41356edcbf8ac0ec4aa604bbadf088fa28799d1968de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162112 Malicious code in nokirane-asaiggfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fb39025ff9e6bca3a57a5dfd4eec801d2b0b601a97e0715a76f44794649a90d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tuddadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c292ae2323987b60b01a2f0fd020765a3eeddb0f4b236380fd926c061c31fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f51bad97e8091d00260edd6e83b458ba12d7efa26c9111587267cc0a5a141e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d671f890b923b00ac51dd4230d175617bc931dd47f713dd9ca2e3929f998bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minadus-buie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f866204b08e49786bab69eeaf349b28664138d1d988a5d240581ea41ff715f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb4dbd8329e7be1b9d0ff97317075868655b1667e142b78f854a3cceb025106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c374262e94a45587159cea05ae61a49aee2661263cf16697840aad4f99defb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159337 Malicious code in manadi-scavior-dareena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d381e9881a058df4d0354af50e826023cb0c0a24ebefaa2d65fd83e1b495d833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156766 Malicious code in iomodra-foa-jalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb4a1ef636cbde329b6fde8f29434c888ca88c7ab46315ff93689c0ee087fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150871 Malicious code in @miptaa02/ntia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934a11c2712b82b47e98a40d1545f803069e1f86e1a5e25fc2fe277ec7697b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155976 Malicious code in ican-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a86e7a2c282dc9515edf234de49eaead83cb7839222d0477290260dafb2d896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160296 Malicious code in messi-buysa-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7893fe0873ac77701c46b19138ec843951e16245e7e41f3a3999512a6364a37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157676 Malicious code in kuinsnu-lki-kadgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445db79098adaf31db5d1abd6bbbce22ddc0015b7c7a1aac939c0ace16fbe088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170039 Malicious code in uinsu-lotsi-banali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfddd21e03fba1845160b0b9728efd05c69a9fcf9470240b649a5f2942b33bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166300 Malicious code in sunden-dibak-itarukinyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70704ef355147d6f382cd77a88689266a48666c9b9c3ae23e281dd1eb5bd2a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-nebula-sequelize-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0094de2b5d9b566517b29185064674e61f7198e886fd9ff5e9bedf51bd2d6f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-levels-cz-conventional-changelog-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f7ffaf5df406c08f6fecc779f7711712a13207fcefc1f71ac2fa2f9a3eaf1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-await-dotenv-safe-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3dd051d31444bc7127eb48726ab34015ee5222ef812d6fb32a4a2db9b4aa15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...