MAL-2025-158682 Malicious code in lookingan-namakita69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6206875dc94a106cbef91b6d43f229664d1d290be4a9fd1f637d4ee994905c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166752 Malicious code in teaa-reborn9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 102f7a5e6e76194861d52f18507731caa87634c00e7897e52274a83d29b76cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154535 Malicious code in dian-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed876527dda9c847b6147db8723da59d5c2b47d7eea7118c13893d85b5e4baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161598 Malicious code in nabuf-otoimban-iag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4ad5d050c0e84f231933138a0f6315fa0516e6d242e631cb5280cb4c13fac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudlea-ofogiari-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520ac79920e97280c2787a9aa12334274e7fa0e321dd0391894609359098d943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e114586de5f2db3a0ff546f47119f254cddb78f5a57ffeb150461a687cc3341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696491a45d671b04c6ca75d53b8c44cc931b3aa3593cc280512e56d7e427d38d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aloni-tolamanaikui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8fe727da1c9926604c1b2a6d34cb4a96ce508b4bcad5e7451ed02da91f73d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molope-asimaianu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962d1b7c4af3300ee8df8f06dbca8f5a516be2385a458c0a82425b67f8ca5056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165012 Malicious code in rival-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e5edc4afeef07416d15181f30834672c007f7461f59f6241c2faeb8810d4c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170114 Malicious code in upa-lublio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5546e37594e36ebea64e2a6e669189701df0ef8309b1b97f71d804da81dcf3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155599 Malicious code in hafiz-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e9e3fb7a725b5af36cf8ecbe84e7a6df5e63ed702cfc976c54d75e0a37a5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161789 Malicious code in namae-nadua-mav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd9eede8dc7eb590c41cde287b1d239e1e475082d36235fc82c0f57a582c492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158233 Malicious code in lintang-tea70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c7de5800cc706cfb4d43d4ef76bc16677f8d641925c145b9967b2f0c6ed805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169647 Malicious code in ucok-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76880298eb4c2f97d929e3fa9da34bed7adb1de78a0176d646ad75934d1f5aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164925 Malicious code in rita-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf00d75631c50a687d7bc1133453b69b4fe92f2b6a42dbb0ca211167ff9fb832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152560 Malicious code in alvito-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efa0dab988d928ce5e0f7c8cd3cccf229910a35c281e39ff6ac9bf751962f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168995 Malicious code in tehah-miss-br (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a09a93611d5e4e6ef96574356f2e84196488c2f846540f7932a60655201e81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153414 Malicious code in avminh-afgi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27965a177fc47606f2d766ba467187a42e09551bc51f28a19265c1af1381cdc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155303 Malicious code in gifa-otatu-umari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0033f2c340d7bca0b95466945006b46388c694b336a6b66738f0ce99dae7f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...