MAL-2025-158638 Malicious code in lookingan-namakita29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3d85475c2c0f8269d72ae4241856acf6c080a708c8ab5b8583e8dcc8d28e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151377 Malicious code in abina-amugi-anuhabumai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3eae21946eec8e33c5981310c1bcf18f89434242aae5faf75fdb89a5ef567e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170189 Malicious code in uyafru-tuittat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0bc5f583659758f313f7ba15e3e490891be30ae02e23534d751792b736e2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155535 Malicious code in gurs-miptah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a47700c34aefab9ad1704826fa4c76bf2196fecf69c96a4890219876a1b5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169247 Malicious code in trevora-cir51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9634cc9dffab094e9c48009248b4cfcbd9c904b4a8aaf4e8092d11be7c28b0d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164722 Malicious code in rino-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5962d9332e4fa5a8b253ebe07ede19617c2a949aa20cb4df6da9d1a947807768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b826ac53185e6b712a0b3585d3f25a8d6c92e4936ddcf2e0fe7c37b485c51da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ticaul-bisusaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26f78413359827c316d03c9c322a7c3bac119f21f1ccb6e96057fcdbe1736ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3feb7642ca87d8e4ca9b071f1960e9607b71406fc3b5ce3e02c050c528875334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a9fbc7262d1dfe2ba184c9bebee76bc6ca8b9b6ba1690d0dcd7bb35386f3478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914c2a85e97a5b253eb81bfba1edd8c23a29bd4a3aabdf312d655e29ea61b84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-ntai-yolaraaddi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3df800e937eb6af650bffb1057983b17be178234d0cd0985fbc7e0646073ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makani-aiba-uf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02691c83a4bb7c0c4da29e9eb5bee599096117ab03bff688ec575d2608996496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b588a4d7baf08ed7bb3e01baa5c85a15202e814ad898c25a3a23a437a5f6ba32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehaah-codfd-nutra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 358cfa9d5e5726f58ad404953002801e49a8c81c43b11fe7a89780177cc24e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/arui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616f779f0a8daa2e6a08f09e045bbbeaac32182e3b9015cd0d0341c5dce0ddc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-zs-drs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6282f43859ecbf05910bdc973c2a6fb0305e6112b5a72c3caf1d11e90c736023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7deb7d2b421f5ffc0d9fe5314246f48ed41e4628c4fe201b1fd836048c8dd63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fc774ec87d8ac007fada877faa60cb34e078e10081f026a9a0a12afea3b9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e75a00368b550eb642f3686b3c703233d50129eede989f542faee046ba984a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...