MAL-2025-164854 Malicious code in rinto-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f7151367175542b92308bf6122f7353e7d5b732c86a13231397832220c11ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150485 Malicious code in @miptaa02/aghgt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71811fff52c56a4cdbb527691784069bf48fc2b368fe2a58c533268f86d85a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150875 Malicious code in @miptaa02/nyas3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005a5c5e95c96953d484a8edad65a64a02aca94c163b5a57821e473a7876d427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bef342869111bb7b49a370e4d12daa8e627969aa404b7dd74ee507f0cfdec19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-ifiafagig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5652ef9b8a4f4b0c12c500cf7cdd824bbb5a69237f8267ff9305299e5a053985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152130 Malicious code in akabi-aliga-aihaamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552df4886b0af413d8dc813f95893a5f59adcd844d3bf7d4f920c629f8248dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158311 Malicious code in lookingan-konami5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29f8a04be2893878a57534cc8f9fda250afb1907d99959388a5551efd4d5c2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153892 Malicious code in bitha-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713543a59bf8f4047b3f8cbe9d0ae560ddcf82bb40c4b125d082ee34acb0c01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163325 Malicious code in nokire-rara37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55da5ffa5249f67f35bbf9d4ccf67ebc0bbd14bae3197994780de15161d71320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151249 Malicious code in abiba-alvbai-ayuba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 767eba9800c52b04789900e08e4bf52c39ea4187e7936415b8b8016764316712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155605 Malicious code in hafiz-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4f7f89517f8a744bbb82594d554d248e9580227f49b2fa02003e73766ac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156547 Malicious code in intan-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5c1fdca1f69275882838fabd2dc40544840b1d52ed394042ecddc6537db707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159280 Malicious code in man-nonatai-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bee43f52eaa9bd9d46ac2cd1449fd903d1117e9b91f3f0dac203ea1cf2de163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152758 Malicious code in arif-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 155f7729515dd3fa05741c59fd37b75b19ffc6f93f1ebc41073f0c38530e21e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165436 Malicious code in sabua-muyag-dafaifuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b3a2f52813e5a25dad73881d89368f7e5de7460f6bd4c9f9eedd81234d8d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170292 Malicious code in verify-ain-aiusamakuilai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1bb33500e1600b3075c038b69635dea5a5a8565949346527ff1c934aaef8dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-stop-sagitta-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb65db83237cfff58b0e4af1e88a81f87370bff46c3902bb7ae2cd9deb6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-dotenv-safe-andromeda-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30882c5333071e479bc604754a3f9a75c212b00c96cc28b0fce68ccf9133706d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-html-webpack-plugin-galaxy-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b512e14d7ba52bb6f4062cd1eba6f1ea5d219bbff74f130db596d0b21f62e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...