MAL-2025-163781 Malicious code in nudela-gagaghagaffh0fhf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae2099cb4b91114e4c2910b6cc8fd816e364fc6ac82f8afd62594e31820e476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158635 Malicious code in lookingan-namakita26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2622833edb2c7ba0ebaca7c8eb290de5e0c89181f2730853f921789aca37a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159102 Malicious code in mahnud-nofty-muatgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c64920910c1421471d90aafe61794245eac9597724eb637be3c0c10ea899f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165974 Malicious code in siregar-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c7ef822090001142acb36026fb6e5a975b52de2456bc5c914120cfa36ac2a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0fba0aa0e2092907eb38af28bc6ac9720c9226b418e141d0a3c38c83d932e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-korean16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c790b3ad6e1fac6178079c49e19deb6c1ee3b8c805d92e2bf2406059ff2dc942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a3440e1bb1d728cf57b0ba328c48613b6e128bebc41f03d7783ab470a3331b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae85ff20ebc7fd282ddaf0be9f36dfd99459742cfa4eb427337e9539f0d4e9b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fabfoiggfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1046bbb1b2b23c4ef1371d18f67831756d24a8b8ce8b177aecb9289e69376c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859f938066546dea16326f043911a1608ad527ce6ea59340129cbe0c382b1757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daeaca892a34e89c3311fa25dab91079a773d0e0407f52e4787b61ff1654ddcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72461d96a0355a66dc2993f6463a2537837561b32eb7716b8e6dd9ffa5cb8a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-aoti-uto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68fa3f95a768a451c0c716791b2b146da950589b1e9be243c9f8f64be3bd059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b622c61a5ef5b4f0810fff764c689e600634ee806da6e9ab472a3f8ad177cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scavior-dareena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d381e9881a058df4d0354af50e826023cb0c0a24ebefaa2d65fd83e1b495d833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmdas-digrga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4785969f2949976edafac87eccb00134147a6539249aafdc36ffb9cd82c19e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-aramisiamia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aacecc88c686c3fb52c71bbd48b406a3a8250662fd72707cb712aa3d259530d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-dgads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba7c036439dbf730f55e714c22864de2216edc85a66126cc48a315016cf557d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dokoi-unisakiaoaiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59508dfdd579f304148210be6ca664b6e0f414f6e797a84d7db8bf0128c98553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al1f-dnk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0f10fe2be7644782399b0ff6560adc0a178abd77532c018864d72716b12b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...