MAL-2025-160514 Malicious code in miracle-dok-uikayananabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b180d6e3a2846374a6879c79d849ecb9b6443fcdfaec6668026cc4ea9a663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158966 Malicious code in madan-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff44d9b66775314262e78a3bfe0a8e7b70ef19d430e40e903862c54a7ce4efb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159425 Malicious code in manadsi-sfaddia-madda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066017aa27a82eb7f8673689f394b1f2dcb27140734a0f155af66d8c41e8c2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170327 Malicious code in verify-aya-amilsukaoxmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add665a3cec972563004924d39c728fd865f46aa637b59903922650880a93325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164013 Malicious code in parwo-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0808d4e2be4738c75a2dd269d13609eb09ac16a003b24767e21ca2f66b502dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168710 Malicious code in tealove-reborn34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4329f9dc067a6adb6679ad02b30de4ea0c99eb84289917bc2b53b566df285410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169285 Malicious code in trevora-cir86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5541255bc73f90fc43cccc57335d2a31f3ff22f796c5d16ba09839492d6051f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-upuasonio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242974d33d9a6b8e10634db9b520bb059abc531b36bc8efe83b6a48ab4c96731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otiganagaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a09752005e8e96cba3d643a6688559e14da88ba64ead2db534c806c33ad982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b20be01076828ebff2cc9fa513b6b1927d9430ebe0663592ef0f07d0607f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehaah-codfd-nutdfara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c39c6024e3f61382a05a958cf7a24442f2335952b1a1a4efcc2f6ee69e60b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nacho-bunian-junio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca23720e68120082b88b6be5607186bb72d6d57ec699bdd32ef16449e951e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371ef0a90df8f8e0484eafed3ab61b66e7b795b06a43c0ed884ac4ec45b2acfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4790a4e6b092928c158baf7df4bce004c32b97ebf7c7fea76e161a9719f9c243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/isog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5831d5d27c6fa2d03857dd3762ff796160fa57a5a41ef550d0280b77643af36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/kaddlad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1156599d16080c5dd6e9c1cfc75c6ec0824e7c15b2282a7402628e0dc0714e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-ddreta-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2703723244576dd2a8d8388b76a036780a35688f4bed13b6273b3d3f067c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-japa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12a8653843ae222b505f0c37164edc2379cdccdcf56882d54e7944a7c5c862f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bdd6c6aa977528d7278798336822ebd940adc4df13fb17cb3fb4e1f548cbd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipie-aramisimia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c4e524d7d421ba1bc43e4074567a6d15a8eae59cb1fe791c27cb146fae6e7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...