MAL-2025-151959 Malicious code in aibopuna-mobile-aranbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfced3351112f59f2de65399abc9e6546ae882e6b62536a2d6909aed56a89917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165473 Malicious code in sabua-muyaig-budaufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8a5e50186fd2ea0a6986715c853b99c49fbac574f6e848e578987232a0a1e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogauof-dofafsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4148722f96580d82bd4be17af904c5fb03cd2529efd4891fc277adce86e822e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289e467f0f679cfddb2d3a0cdcab6538c80aa325be584e90b9be5dbd400f5a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagimdas-dfgiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27bd6f7276043c0f986e924e58aaeab56f4e1d68f0f8a5da2ed22664dae3cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c6fe1944c66859d8caaa214874b2ecd5bc55551b5d9517a9f9392dfeafbaa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabu-nali-lbiya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d40a052e64ca3bde711323bb3c5983f00ff6879661eec7b1c8f635401836e373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd4829f19a6085265cac95fd221ecbdb6ecf716d7dcbc71f01bac43a0859b64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-nabutafiday-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28d4bad91a2611d995fa94fb4ef5ffc752af3215919bb5aad5db52c26b7cd21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2747c75eb82160d4a58aa0c1b010aaf8dd7d9ce3b4a594760c4a81d20dfa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahaf0fafuheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33913d4d5409e479fc98563fef3f5449e4dbcb0c376fc1fef7da271f822bbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c84125394058cab54c1d13f7e2417d64237ae04db091d19989d57f2829ddec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-dangers-fantma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47abea5b6b38e387b530cb2d65506963f03d3733a3885245e205bda3fc60669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab23f0e69db76fdcdead4890a76a74a1853ef6b25c5fb5b87a6c70b4935e5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-naikufam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec428aa134d7eafd24ebedabe4cf4c5b34ad71b680de2ce280e42bc6de0b58b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd227554ba9407681ffad34296718ae330718225f10c648b148b87d3e28b5a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c011a73a98537f8eb92762f524407d905a2d01ad136ea4ac013ca0097452babc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea75dfb500b56a443a8349b5c0f0226bf119b523a904d2a24410f2bff1d58e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyada-uadania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ff1e844aad6cadd1020acc364f7b508dde3316531cb0a2c536fec0b0ae9134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fgob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12680415c25292eb2aeeb80f67b51ed3de21eb896f56a28f9bc0599c8228fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...