MAL-2025-166687 Malicious code in tadashi-tsu-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48f62555020dc84bbb796f7da298d7b26a2c6c9fc205a9e1b01e0f09aa965f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157217 Malicious code in jurss-zas-dardss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb76ba2dc9c923a0d9bbc833f367b57894b272d81e68a027ba3c79f12524273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165672 Malicious code in saku-aku-iu1403 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74bad0935bea56b0092046a9c3d7ba07073985ac611a5abb04338f3bcc802750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160997 Malicious code in mursai-bdurt-ssd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1351d0b500684d0bfa0b147ed52852ef8faf6d8bd350512716cd670d71b7e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-sfd-ss3da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad6149f398396ff14fe931b9336396e0298a7610cc79f09ec7ec893fb015ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e922aa71046de5364016b60d7b48b9459ebc1cb1e7e6ef2d879163bd1a91f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de5a4767e519280122cc5f26f36fae1a0039f6a858ecc05c9c5f81f704f3c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6435a39724fc11d72903aa0c8178dc872ba81e1dbc86ac9966a9b7246ea8943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-muni-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f940cf79e56e3ee6a93ca26e5fa693d204cc218abcbe3fe32806eb667ade3b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-sea-sswe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1befbcc9beb42fc21e33902c5284573425ba31360ada8f463b9be34761d727d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca71afee742e0e276cb42178abfdcb76420dcbc6556d51bc46332ec13a23153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229ebab54512e6e1397e36cb3175642185601f3637aea18c4f771f0cd03e2c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edeefd8a25dcb8e6dc5ed4c0a1c1153ba78f4fad38c0bae013b37c97f4e1bc0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2861283b509524712a834b159715912074a962171a410b8a8782e2c2459b81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli136 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c758fd48a89ab64ba3fe9a4ac8410678a5242ac32a83e1a8c40e6c18d666066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manus-tavail-maoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5629a416ea3e2f11c40fedff8dd845ba2b19ba3521c75713382248941f61e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mursai-nuttr-sssda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec8fa9ffe63f91580f3211bdc232db8ff3bda6dd8cfd8cb32c31d4a4626ba41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165877 Malicious code in shilang-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3121b1030817a9e12920e28a9a40644d0f9174d0e62c5bf58c8dc878240c69d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164172 Malicious code in pilka-lniu-kanuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dd5dd30f2f91c409496481abce17a0c64aaefc118d6a2c84315c3fc58db411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153959 Malicious code in bufpani-muisyau-fanau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3eee9c8a6ac2ea1bb5545cd39c577d413126c99bc948a000e3096d2f6e4a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...