MAL-2025-166563 Malicious code in syahlan-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc654884fc8cc1c29e7a9db540933926165f6f6e984ff576e0df773307fd25c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161101 Malicious code in mutaus-mansis-nutyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926f2a2a1983160baf0af91ff7553feec2e968dfdfcc9db20fd3d84a87fc3837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f41288741b796dd8505ebbb21f7f5e095f0476b5ab46da091f95a7647cda3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31c6ddf2651604bb770448f532f2b09ff54bee2d2d66b60d67a4a37476e2538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70feda5d9660e703be4b7f1c730a82a827f79ce09ea8d637d465469d634d3b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1003521e016ad84d5306966d038fa56fcef3e074e3a00e46d6383d10ea7f549e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fabc2eba3bc2979a8df8a46054ece1eef059a96f17ab2ea8fcecbd38929bdaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iagf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 712c5ff264be4f3ea1cbbcfdacb6b5cdb7f275828e5cb441bd597bd666ba8877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sdda-midadarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d4bce12c18b51986d96c7addf4a4d2d461bffb2b9e0f35c8481197f6ebc450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasis-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77ce1b4bb7f00061318e014a85b4b6f9fa02e92f8c8a51ffd1357876b1763411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1580e43ef2e0d44dab482ee9b997f6a422f31ec78a70f8e9ab0dae8ef7eeed8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11c17f51d6b3690b21d9c84f4e92da82425e1e20cb114651f6fe64fb4d61681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0930cb1e50c04b2cfec8a79cd09c396bf3f4343bdf1d6e5d855815384adae800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35726cea28a84fc9042dce3d0ca4cc283801ed3e1220619c82b71ff82c4b2d62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb78ea8a09b2c922cb5bdc7b92e40193be19b290c5bdd626ebad1223d461176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400e3d4b56c58f74a22216df8b369476a0caa017a8d9558d630c27264e9ff93d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ed1c8316b68e72aa26895c6201cbae3e15557c236cc97651c4410d32138d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6da62fdb9d25b2cdef5f42214fc658b73da498dad6f3877190e5bb85ae976d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzimub-ilunoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8510a779e57ce3e9f6a23b68d69077773f427c410b50c21527703ac2a7320fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojaugsggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad7a256de090db25e6b081d3cd8a573a5102751c825ce0e5cf6dfe56cc1709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...