MAL-2025-172971 Malicious code in anidata-hopanud-mafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3790d7abef5c1efc7381169401fe24687aa7c80eeba68cb275507d6524ce6c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-ta-fgif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf273e127b659f3f9968d836c85d2e8a25dd5fc9d69f15f1f75a9fe3600d3f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pom9r-nminl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3645a9d36c4cc2e9059d29c54083712ac9ef5b07f94f7c7bb1ee57ee7478b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ameenrazik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45b1896ea75f6587d42e89fca98b5d9a097054448c094c6b7274400b71fbd5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171868 Malicious code in shhakimfromage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6167f5a1396b3c4ba5a6d151b87daa16dda10a6b7032751f76299c1c109092e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171719 Malicious code in pietrocosta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d452f23100e7156aab3f80e1898a2c87c00dd7e8b9969f946768e39d4d82f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90374da24e17ec4ee4bf6ca921eef3bc65034c0c22b8ccf4ed7bb0caba2a0187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mattu-mitop-butada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5464a56fd6880d321deae2c448ee640d32865718c4b611bd6752a8a33fd0a87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f65d433866b50f122dad06dd4bfa70cb9277655a6cd06a93326e9d95e254a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotumafa-anfozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67d0c604ce2c7beaf53d1d9b333e74014d3fbf21da013058653d7d43ce8b25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-moilpe-arasuiogo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79653bb13ff2a32d6a510ca4fb12c925e88e36784a5f85c32e162a86dfd9be80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-amba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0bae38c3416b2643f5b64aae5718f029747d03b39db59c491e421bb9c3cbf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163985 Malicious code in parwo-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3149813cd96c29ff7c811c175bd9034e12068a33ee8ede1d4b8526679b5d817f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168354 Malicious code in tealove-lady46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160ebaeadeefed821e9fd58e6f650e6ec3a74096a53fb641d45b88c6c1da733e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165945 Malicious code in siregar-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a674c1fbbd745c960e8544a64b4611d086a3599ada9c661c58d6a466ffe21899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157921 Malicious code in kuroichi12-gdfs-fhjk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f5ccac4306da31d4de263959ee7b16ca6f887611e3a132910a9ecd86e51dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168533 Malicious code in tealove-nice7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21aca7e8759b6653fced30274194330bce5f545f1f95ba25a875322c6cc6a4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c81d9326854e29cc5dcfa0c8769148e934e2a664529d187c7f7db566182f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f9c0ed54dc0ed1db109886b7be69548ff4b3d3ea6a9d35d22ee8ed4c211c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mizdcs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46b4e6756b2c77fb244d319962ef1501806360958a23ba8a15273caf371a4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...