MAL-2025-166645 Malicious code in syahmuda-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ec520ec9c75b25261b4eebf092c350f6f95a43143ef0e4a7d67ff8f88a2aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161353 Malicious code in nabuf-oguof-dusagomo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10671c4b732a3f2d2c6ed6434bf1a56b46031c5baaecc78e51ef061ec9f0f4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154629 Malicious code in dian-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e423266b25e8791caead1bd44566322f4d2bab17307028295b3851178e71fcc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168141 Malicious code in tealove-boy34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e98ba0b29a99b0fa6bdaee1d2b09a6a25c2b5ce824bcce539ace32e33cb06c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-sa3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705c2f034ffea819555a1309c6a9df958b47473603ee46bfd57c218a37fabb28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguof-dusagomo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10671c4b732a3f2d2c6ed6434bf1a56b46031c5baaecc78e51ef061ec9f0f4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e207bb145f9a93c0219788dcb46c286f2514ee30e89b521afb254101a58a99f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157560 Malicious code in kentung-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6162ed5f0e3415cb334532862b053dda77cf2dd311d53533a88f7240edc8e234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161008 Malicious code in musasiak-butsd-teru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19351c2bdc0bcf7709e31da5a408ff7fe81dc0ad893981308465c402e55d6c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154472 Malicious code in diago-kuli-luvuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6384557b9e82833aaaf456026fb0846daa9911d6df1bd5f9fc71a26376b65e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154297 Malicious code in dia-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ac85027aaf7e6b21aff4a5f4546402587587bb61053fc103565db2885b532d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170112 Malicious code in upa-lubilio-igusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb06cfb6697399ed887f7d50302fe4ef23786d964e116254bfb70a2e452a383a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159009 Malicious code in mafnfs-matfddu-masan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1cabb88d53e9d8f869104bccf4e0285cca13e1d997701bce10d79068a71fc4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153469 Malicious code in avomainah-fagais-fofaguyaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0bf7f1d2d5e8182377a8f62dcdf8240224a5622e1ccec13760301c06b1407d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152116 Malicious code in aji-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c801f863a23d4436ed5f0736cefd4faf352d88c911f8802c714637be9ed94c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-jabbah-ignite-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4507051c332a729b6cc8aa5e646269609ee1d1a86c0e98c10de96f5fb7770530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-acamar-terser-webpack-plugin-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d67598092c99278899708ccaf956db5b784f63e8cf0fea187c25b581869382a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-tool-eris-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c70e245e0236f09ab23fa8be3ab93de3e17af4507ca9c2ea53298eb3bf1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-metalsmith-apollo-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e7e51a83f23a65a177aa0973d2ad88d24a3da3dda667c7cf1f4228fbb52357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-quantum-andromeda-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92dd57197959c002bb3f2c34384d0d603abb5da34acfe5db2fadf10e630b6ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...