MAL-2025-163316 Malicious code in nokire-rara29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bcec68c2bcad97d4312b74fe44b75ef5b55c30e874737a9b5d8f8af7e4015e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21aca7e8759b6653fced30274194330bce5f545f1f95ba25a875322c6cc6a4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bafc27ab61c9940d3e44f97aca7647140896a4cb9b3e52d75dbe01010b157c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170297 Malicious code in verify-ain-misuanuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca2108caa852cc0264f4ced7d032d3ed3261ad589536c0e551e80945f60fd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168616 Malicious code in tealove-okta38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 079e21abc43004e78566b65cda2f61b37c054b460c488ea09e1906d08ac4bfb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156893 Malicious code in irashi-2aaswfsaa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46e1d48f2f4c061bff0c52b2a04cb3de4726c30858d12ef30e36c7e5e6caf47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169687 Malicious code in ucok-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9aea45c0fe6430ee08c4f4de45d8d8b106ef7cd11c98183e8a79889e7f27f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158260 Malicious code in lintang-tea95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc02eb21d2ad95ff9634a74c7e2b45e2e9d9badba0786beeca33fe7d4f7beb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151624 Malicious code in abuni-nikamia-luahuubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0facd06f98306bd92b00961eee8416da88c7b839338bf494547a0bc565cdd70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161943 Malicious code in nasrul-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea03278fa43cf2dc20376f483513425ef4b1893b51b6c1f53d5548c76df7fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dfss-nduatd-nisatrfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5370fd3887c71b51dd559951950e3e769f9f63375b533c0974237a3d535a7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385675710dde9d5a43a1a5432a83a27dab52db2d7b97be6468bb2ef0c85aafe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bf3e83741026ffc0b582d4bb4447ce5d04675ded820b25e935979a5f872959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168718 Malicious code in tealove-reborn41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff5712e906f2747153122a03d6900b1c4ce4573316c295f45d3983a2b8daaf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-chalk-babel-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de7c2533236ca1f801bf030137850defec575a679cb06bce65de87c0e3e9c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-init-stop-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5641579cbb1411c260c4a54abdf90d3def958523a27947118360caa005c2f5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-quito-spectron-webdriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ab05c0abe59e44166b054374c43449336ba83fe938e39d8214b4c678b52ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-neptune-buffer-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99f96519afc0372b2dea505b8c770086ade6f53b8d09c6710009b159b9c71f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-webdriver-manager-celeste-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa7ea599966a12e7050333baf3e7fda0daee36bcfae5ad1fdf31c994c1185f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-react-bootstrap-phoenix-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fd1f7f3c597a5a98d0f02b38ae7147c321a5db0e4ed178cf4dc828ff939ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...