MAL-2025-160112 Malicious code in manus-tavauil-maoii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4c0764dd32b6304c9c3140080188acfa713e222b39711e133fc56a4622f788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166173 Malicious code in suharta-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae16fe6ddfd78f289d36c40cd4eb60f154d70e5c55072e84f0dde7968634115c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152158 Malicious code in akabia-aliguamafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be22d19b71d3644ba5751fb6a8ff63297c81528be4c805c35d59df56087e38e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ad-fafs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e86e6f387c9e655be78dd9e17d3fc8a21b0f67b2ab20e7659d26dfc556720aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiari-agomid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3df30140b4117e00471028eddca449599738795567e2424c1d286cbc3730b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b0c6446b1ba5eb81ac4329ae78bc73ee4e53fbadf417814e484fa62b4fcc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212679a43a4068ee08dd5313569c8e0ef3d2494138f1c1063cc742dfc2fbe1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansd-nomafdi-munau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e40d7cb9624468bba074acd5c531b4bbee24435466fd2159d00629e1901566da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avbai-abuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c56410cee2a85b0f45c17018077185401f5c9a793044a0c5924aadcb07ed2f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotumafa-anmfozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8049813a94f12c1c10b83f4e4531349a69963a36cfbcd0bbb1741673a90d2a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3e65b45eb5cc3c8641c6e260b9cfdd0619b124e0aa61555d35b7b2482756dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-aramisiamia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aacecc88c686c3fb52c71bbd48b406a3a8250662fd72707cb712aa3d259530d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f3e1b4ce57bf026ff9a4e8524a75746daa1904480e3ae7a893c88fd711613f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c049b26c6cfe18cc64aaa8da7bdd8153f8e0c5f6c08aaa44ba2f7ecff3cd5b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al1f-dnk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0f10fe2be7644782399b0ff6560adc0a178abd77532c018864d72716b12b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e611cce22e477277f5edff9f28b50559d1f89f7e736fe1ea33cb93957095b31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-korean16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c790b3ad6e1fac6178079c49e19deb6c1ee3b8c805d92e2bf2406059ff2dc942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a023756d72965e2698feb590428f23353c2fb533449d76b8b552a1d47b31c2d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe1453947061a2686f7e5f5708c644480e2c4a0144657138755f7792e11589e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-klop-kalobaksi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d1d63fd280c3c1dc6b75bd4a7e56b46a471b34ae61519ed7c9bfef7a2ba9c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...