MAL-2025-165878 Malicious code in shilang-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc17b5d4ad95163ec08388bd04749091bfa8eb145a5729f9b48687e8b2572a80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163691 Malicious code in nudalea-ofofiari-aguta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d65c41f0370ee8432005881f8c720b9c3cb271ef490533b81f2f1f9428cab4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167717 Malicious code in teagood-namakai60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea257cc85acd869c8c85382e09e6df0af7defaed0f2804103dca1f0d7bf044a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152245 Malicious code in alfiansyah-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9b4f39374d9f313e1f09d3b3afaf604bdfe3fbb51b59e5f171306f42f62435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152406 Malicious code in alita-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b91f11122d05cfeb0f0a2145bdf5126a17b49ebea9179fa5516134717cce627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157011 Malicious code in jeep-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49c838dcea3e2ed6cbfb080ce63eebd1898a01e0a4576ee7c1bc298586444bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167615 Malicious code in teagood-nalikoli59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de845aa382a0b8ac5dc125fd18a8baac6dc3636c20bef0141ac40f7008e3ba6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161804 Malicious code in namae-nadugsua-napuysop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426ebe17abbcea390d007c8e3d1eac0a124ff12a616d00d7d9146de146341ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157389 Malicious code in kamasada-nuyata-buyat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c7151d13165c2c1f3a2e30b30e8b5c90b28c34c4742b0b296d3f863be27746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154995 Malicious code in fatidra-faradda-nutdarddo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55314bca4ace262a4aee35fe3df88851bfed02fbf86cbab11d7c08ec9ffc168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157364 Malicious code in kamasada-nutsai-aasaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c0b52cc65851d29db612af2cce78b598bea7bfd790a0efcb0192800c837884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168917 Malicious code in technical-aloni-tolai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf226dfcb912fd7a1433d4de0e002f7bac98666517f3fe48c51efe0e63ea7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165751 Malicious code in sanctum-cookik-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c13e7a3649769826894e42c234435e476bb134c33d36be73a2cf69544e1c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155887 Malicious code in ican-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6b7b18d491182271c86cf2e1045e656b5be313843f824353f38cd6e6d10f9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154718 Malicious code in dioalgo-kilp-akiualabnanuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ebf2b1ddadc0d13295d5b1825733d595b589c9d69139b1e3669f24dcf58b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154937 Malicious code in fadila-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e0635ca7f5b027dea7ba671b4c3b18e929761ddd3c87ff4beeb3d198b17738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150597 Malicious code in @miptaa02/ewghj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2fed4973c713e529319aff36f07a33b9ad3a0458f9954ddc0ed3b177f4dd5b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154541 Malicious code in dian-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a90ebce726c3823d7c4a18920cdd3360a477fd0c247643e601d007f45b520f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168991 Malicious code in tehah-manst-munrioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fec82cf3fd9ba65f5d4931951acdb6c981037d903d439ce8f9189302045ec7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165196 Malicious code in riyanto-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da32924d8eccffe5de6f6d26e5c9f9f746f0ba606ca9957f5dc95f0c42c538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...