MAL-2025-166740 Malicious code in teaa-reborn43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e729f3cf08d7fd558ef2da7ccabd7a229a85ce8ecd127fdb8f719ce3bb7f739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150780 Malicious code in @miptaa02/jiss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6683079957b8081b4e94f912fcd4b8fe6bc570d15639ee6c219965e837956828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e760ad24de9a26b83b1a5321f63a2c107a89732c18969b00864281bdde3581c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6e91f48cfd128ed0036181b8c7680c774a88429bde925a040d98441a7b72cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76558d63b5260f87c983c22e898b60e7ad327d5ccd11c631d14eb92dacab8900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202ad25067efa9a61d78e7faf19b877946c4f49e0f521f2980443df3193c0ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b575a63970308183fa8c9aab32d07b37cfb009778510cf7271e3441fdee2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08112aeac9e69d74e71b618b34c3056b036234d112583bf79325c87c7c73731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78b8d31f5606bcc5225757c7f1bed6fcbc71db2d88df74a5fe546ae6facc322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd369dd51da646238253bdee6888d9aa9c805ba887c706417a684bf73a24694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d011e75343f08f863c77b70d6217eccd822c8fea5d0249ee6b5dd091b6156f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0208d8dd98ca313e6265482b6ee7a68b665d3d94a61198463a7966ab83c01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyati-miadpasofp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd247bf4cfb44c4155254bd1eb0c1a948d692f725cadc370eff2605c849a899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb54d5bd28983077ec5e1faddb739c2dc9331fa90d141110f009b6ce508bd42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-maraneffu-safari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247d231bb9022452e0596e69c7181163ebabc0e70be735c116c37feea5d0856a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fras-ofuratarau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1240e06c635b48ac3403e4abd6f3fabe5c4be323d6ede35b92f8cb85bd9d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6030601c9d0217691d5e1b1fede1ea530a61f5752c8a4aa118a90a2d36586e81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moloipe-agigsinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df010e2be8c7a8f84de902020ea2a742ec0b1b60dbe32e9f86d51f1ea1f3c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sdada-mivafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2ce8e0faae5861e6f62c6dd7e094d9fc278c60d8209af1e908ae5c8d0b69be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-dsaxdga-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73b0ca88f6704ca89d34d4305a3b4e73a3f467e9fe46f126fa714f04e322902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...