MAL-2025-157910 Malicious code in kupai-ukuta-joki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b03acff4aeb5571744c1edb08426d6519a2e6704e10b697d6a2f11f0a7ff1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160602 Malicious code in modirai-fian-jinanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1dabda8a8a3d47926d7fb100f3379a0179786fd233efbaade1cde1975b795d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157847 Malicious code in kuinsu-uyilu-vilannakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bb8ae35b0056e2edac27d43371e16f39e1d6c3169977494c840c8afcadba22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bini-otaima-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3097d6973b257e39795f409d51dbc7acbdbe396e76536bdf698817aba709fca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kunuasilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbae37e5285bc2dd976055fbdd028ce1d4d78f46f9f357e987549d7ff5afe3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2ee62221a0fafc26fccd4d1cb0b6e612a47eb0dd45f660fb93a67eea15a849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sssaghafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b391d94e9e3b09542ffb697cfbe594ba09f7556e9874652e80b94b96aa3792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alaki-malikalahoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf95752b3d1e016b84e626dad5228ee8cb79a7e4f22f83aa816d59d5a8d44a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sdada-mivafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3477bc53f65d004f3956522cb39b04bb3492f4de77ffd5733b15f177a03cc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilau-akabaliu-kluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5865de3f4a5c595dee1ac2638ebed532c5a93eb8eb1cecfad4ff2bded9d9b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fda209a3ef47b25e28d59eef0cc31032509df805506a4787a4ffc426adec84b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d72a6ced10c99818d88cbe8c732144aaa3c126e63a064571e8344762f1612f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unyu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead2b3b6bf48b4f395fd927a2d50688c72601dd783ff0a967b3600d18f0bf6ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b50e0fdd2324db8ad0e85ac118d8b2e352d23206977bcb2d07bfcfe0326377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee05daba4167f8ec3889a96f867452156f0261035419a4adf32a16eb34e1665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhadafusfufi-nyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90479de048ba8ca99432e50d380505f8a9debd7379920b0d647ffe8e9763019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95887df8c8df5863509fdfd3fff81ba967b3699f79b8fa74a05d71e0200e1bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0d0cc6a08c3adad3e053a69c8ffafd4ef56c14d50ff1e1981a2e2f41c6f9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mkofttifra-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99547b2727a8647f31cb7971fb320465eda40a7490fccc72c33b05be2c66365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37719eca12b241b1bae04a15817676be50de75eef441a7fe0b37fc5ba5ac5318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...