MAL-2025-150237 Malicious code in @mipta1/sfadasr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb58dd15a35f9cc425ffb3bf80fdbeeee206ca35a0c00e4233f8006ae7e2435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155270 Malicious code in gafvoay-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe37239d1278da8aca456247a4834a027ec3cedb451453eeb9930544659e82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165753 Malicious code in sanctum-ref-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75671ddb7f99123fe01dc038df416bc274a5e96175b624164ddd971f0bf2283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158732 Malicious code in lookingan-namala22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5cd5ff060a97efaa2faba6d3b89b963fcd3c4dd868d3bbe4066439de6f4e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153328 Malicious code in avminh-afai-fafoaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b21b8e749a5e79396e5a86029f7756e35d8c4f0f8586b1d96c25671c3b81c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154961 Malicious code in fadila-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5e1adc0b91d83cd019f1e8fced30bc4eb617a065a88db4f0e4edfac62ef786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152791 Malicious code in arif-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a8850e3e45da6098bcfaac69257d80f78d2318e418af722b9e95d6b7c9b952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155874 Malicious code in ican-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d891f670a1eda926665856cbbb7477f49cb5f700ee07944d803711f1e4d3b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarug-miuafi-suatfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb01e3052e42a7722fa4acb41ab401e3066b0db079bd3bb8b9e81e3d18438b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dilak-nulikain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f794578814080ef5fbf55d38005b59f26b81a2521bd3eb7d02de910750b80fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-peddat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5383f3e14c5500f9e7b17157de433d6d55ccaf4dcd8759acc627fac12b65691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170262 Malicious code in verify-aikn-misaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c87f794f4836971b0c80fc232b0e7078d569dffb277d18f1895bc02ca6fa23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150977 Malicious code in @miptaa02/tfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78146787eec10e34c2e732a4a2bb559fda3290016e3ddff3ce9b96d0c4c80ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161440 Malicious code in nabuf-otiganaigof-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b52bfd73258cf7080273f3da8fdf3cae6813055799fdd8584d0a06f55ffb40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62511b0d48a26de2fe6de5cbf541d8607c04e63b3aa7afabb41e02b2d98e21a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhafi-nyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2c3bae652d774482821200fafbe70da67fe620cc5fc88a0a925bf907f91269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-ma-safu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1d14c828319fd7d07418145f409a6d10797c88c5502fc57bfbc34aeaa054dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehadaku-messi-cr7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b36a6c90d05b35a7fa4bb24083fb48e9480e19c60de0f937d22225a7bbb1e1ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee8b028c37c5cc0b5cf641c32ce6cdc095de394a054f67138851d4a91b29ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ticul-bisusanyaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bca663eb71b3891ef5f95a84721136352a3ecc2693d1ec5014ce60f99fe90df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...