MAL-2025-168072 Malicious code in tealove-aruma18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d8de7d9ea35970c288d0f363e829369e068d342062e77bc41693ae0ff6e7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159633 Malicious code in manda-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6209af701a75cabf5fa6c1f6461c9fba7e41d232b074ca5c6d8d2f5c051d3cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159555 Malicious code in manaf-yuki-mansua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8bc1aba7b02ecb8ff0d98b7f431436a603062dacc156922ac4d8cdae1a7fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159169 Malicious code in makaiman-ania-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fed25ea223ff5f4d1f05c64fbf1167172073cdaf3755e6d377b197dc872f66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150279 Malicious code in @mipta1/tsezar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae575becc7093455eb6a2c1c2c42520f54bc9e5f73074091681aaef96fe4838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168497 Malicious code in tealove-nice2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31a4a08021dc2c5c793a28c8abe2550cb57520cf911922055def19153a2cb218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154849 Malicious code in fadila-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3928822f754dd52470e8836d6b982b8954daea07fd3b75034f4846602d421f0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165644 Malicious code in saku-aiu-idasdssuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a685b3e1bacf67dc1dc41c1a5e62aa583dd0f04a73be1e3120c8d4309c25811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163810 Malicious code in nudela-ofgfaf-gaagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f69960a0d8060c16487e1013d3df5f3c7f5257221b839ec19e3b23347d472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165430 Malicious code in sabua-muyafig-budaifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a6585e5c96d455a7714e34560ff7ce2d47c63dec82ffa4e38e223a33afa0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152230 Malicious code in alfiansyah-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28db6404cd0d2f4e3902a5221030b1e9911008e4d5011c908bacbd13435bc428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150501 Malicious code in @miptaa02/anul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee2ec16d87f030a8f0700b7c79a7e0cef4226512148fe1da93c6164e155556f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163463 Malicious code in nokire-sekiya70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44bb091f8380106410fea89f6051bd4a2d6dfdd893d5687954d96e0cce161e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164411 Malicious code in polymedr-min-buipenajaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bab6e8077ea60b4977aea30022dba0b1666c712f19c8bd9b96b11c59e3f14fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155346 Malicious code in goodmanmax9250-strange-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f15b103b79b0dd7fb98f8361d4bad68091eb22e7e0c760a68ace301860a83d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159158 Malicious code in makaian-aniga-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7230ac43ff7cff5466f4f0eb0165880c1fcd12545deed440641913bce86437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymeria-miod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd07b443266a3ee614bfdac702308c38d2ccec0d33c06b7932c8dd2d18ab125a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015a65e5f189cead34be4a53a7f7a0a43ab39845214b031cde11311d28bb8077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2cbe9ead5cea67cae7f19e0d32ce685b452e60dce0bd4806e1a7088e412d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mundya-misptasa-riad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c884a939adf86ee837e37bc07ab3ef9d4b159b275d0a44ad96899860fdbacd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...