MAL-2025-158870 Malicious code in lookingan-namalaka57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695fadb79d8130085692d77be4f12611d2cce4e89209a2578e84304375cff82b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151052 Malicious code in @oppo25/lastbro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ba0e2988258b029b28f1bfb6d3c2b45be5c98200e0c106ee174394d84079c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156781 Malicious code in iomodra-foruai-aunai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b32d31e981c1f83c47ce2fb85b69a1458614ef995e766804565278cc9ae430a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160403 Malicious code in messi-vutsa-vutda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465cd0dd178612b2a2765bcef52d8e3cad40b31c01c3e52ed228b1a59a02e6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166470 Malicious code in sunderlan-uylud-vamuiubknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d487a31f6db107c438f02d84dfb9c1cf0394e80decdb786c5734b63a044738e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150060 Malicious code in @mipta1/initia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c9445891a89e865a863b3697108a170be60792d7e147c9d91af576a24fe958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152848 Malicious code in aril-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c69a08da4b2178725f5f34cac51bf71e968942a5c3818301c80e840b7509fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152823 Malicious code in aril-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791fd047016c990fd881302b28006ad56b81deaee62b9491e2a9e237e179e62a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165377 Malicious code in sabua-muhuyau-tfadiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbfcbaa5237e95fb36805155ac244a838c1e17746bfffe9ce637081c2a07916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166473 Malicious code in sunderlan-uylud-vamuiusuabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccb2d639b4d4bc10603b7e71ae51dc321d81970dc29185ee762e6733426d196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156226 Malicious code in ilang-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d921ee2d66059ccda495b24cb651504f14193f6c580ce55629ef07056e58e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163967 Malicious code in parwo-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73336b12f8fee0860777d6aeb4d7bd7da40aecb3ad8affcbb1f1c0d8a2c9fc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161124 Malicious code in mutdaufs-marimasa-deadl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40b7042e19ccd70378771e8672b0005c16e7540c7f33b330da877e90e8f660e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151290 Malicious code in abiba-avin-aumau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2624c3d8c96993a8a93f253796e0f080d3f748610cbf7829547d5634595b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169688 Malicious code in ucok-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2178c5b7a449ade9eaa5cfa930ef4d8f531936749e6ee03232dc89aec41b53c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170219 Malicious code in uyaudtu-tayut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe7e54b0976baa41bbf85fe42c0fdbeea5309eb6cdbd134c6ab41a311383f3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163929 Malicious code in oalgo-kilaso-akiamako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b089b0cf4ae11dce7650dac477b0638df6f37982a33bf92189e10bedf4cadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167707 Malicious code in teagood-namakai51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e563fa9487d3c3795b1d9e3c969d9fddccccededed2e5a1aa7ec09ab58983987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153782 Malicious code in bintang-tea33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89002f739d4588d007a2ecd009807262553f90091ccd9c6a6b73d5a0a1ecd163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150420 Malicious code in @mipta19/rykgie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 315b4e6ba36afab869fdc293f208a87c1f1aebac15a4fa97eda344799feb547e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...