MAL-2025-158502 Malicious code in lookingan-nalako88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92ec2c54f1ee35138e9c6437b8008a2b3486caeb790646e32add2b9250e73b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150562 Malicious code in @miptaa02/denba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc357fecea85ed38951b7aa076b95aa699dc55bd6e4c57cf5e13a743e8a788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169918 Malicious code in uinsu-losit-dilaubaukabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d0a601d7a2e841f616cde265ee992fb75d5fa18df49f31a5c8ae7bb2e57a4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167767 Malicious code in teagood-sukuna15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c981c5005e80d6eb986c18e50165eb03ad64105fd98764c3228ce802a474daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152061 Malicious code in aji-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e788f00508964c9f5272d9ca90273d10efff4a1be6506c33017de0e9e044d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155617 Malicious code in hafiz-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b830634b2df594c1f81b18f028ceb789c93fa818ace3c827dac122c1c0364ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166752 Malicious code in teaa-reborn9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 102f7a5e6e76194861d52f18507731caa87634c00e7897e52274a83d29b76cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167981 Malicious code in teagood-yakuza24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85c9facdb8bad751dcc69302d144b48e74bc3b70872f9ac71a443d45a8c591d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166427 Malicious code in sunderlan-ud-vamukupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356b7803fd7f90ad8460e4931369ff974eb8ca98dacb44933a68533dfb17d7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162867 Malicious code in nokire-loklok16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50515c04bd512a225facc37076bca95b9c98b31c12b860c62d0e3df9091a6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165579 Malicious code in saku-ai-ups012uszxgiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c80ad4a729ef151488051151459434b477fc3f2e327b030ed477c75dcb256e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksunu-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13559aee79ac8ecbae6bcac82f4267b53a56d603b0c0bd848d63c4871bab01db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c656af7ad735e2d4f4c9c302b352a6acd0f14a09033c6e525dda6c2b0daf449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cceaaeeccd163861edcd1622cfb8c741d34a6a5d61e0c1b00e7bb30662ded4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyuudua-idut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e824e4a03cddd7101c4fef5dc44f830bedf03570c7d634264a0e062b5fcdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde541c967684b89c6cc63e57c450ed3ebc4c988d0c80eeb70c5d56806c7862b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimn-g0afigagig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d5511af50d2589be6ca5876ab1666a1338bc78da8fb78395b9f6627e262066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goai-januga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981c62507b434a172479098dd037055aed4318f23c6b1585be31553c62e94c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b265f74039b8512fe209b83f87cfb4b53dbf0facb107aff387caadcfc544342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-mala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9acb7841eb0244d85ea59aeb22c180c1b8ff0a0e229cfef464f5567172573eb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...