MAL-2025-155366 Malicious code in guras-asia-bang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a30634e2dd308ce521fefbe1c634d5e98dcacf263f42708644ee625c724a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162308 Malicious code in nokire-akaza90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a85268157566ad9dbdfdacd067cd99540613435953f0465ee3fa015cd77705f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161116 Malicious code in mutdaufs-marima-bustyasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9283e2eba0d23a56e7ab32b39366a763eaac78f093c69f35f14a860794eb721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160088 Malicious code in manurung-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746fd1eb90d32ba4b85ebc35161cc721d9828710482a14cb4cfbd7653bc8eead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151041 Malicious code in @miptaa02/xdz2rdtj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483eba19755acc71733826a3cc7f3120553f4ac7fd6d564fb830971fa4edcba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155003 Malicious code in fatidra-faradda-nuydua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa3c1c1536ba40bd111240397df6a2cc9bf82f3263adda888896f3941ccbe7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169613 Malicious code in uarug-miafi-suatafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d088ddb8b2df103b40065871f8340ecc4676b15fe2b6d02fa00618a1799545d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151053 Malicious code in @oppo25/teanager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb71f121e863eff573f53cefccff448ce09432c675c576d71b7ccce08e11fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155688 Malicious code in hariyono-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618650488eb55ee940f7cf0fe2478240c4105342a1f30316e4e5cf3f2186679e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157220 Malicious code in jurss-zas-dsfaas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe7a1dbdeefc1ecd7bf6cb943b24d0a31c9cdd678e56de6617a066edd911e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke588 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7eb52226fec7da38db7a3968a738ab1ec727c6a167978686fa0eb8f54c20b8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimokafigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53e2206aad7e1f90b041401a1d4d380e8743ac572c08464f944ace67cf5936b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 090b70e227cb1981dcaf4ef935eb43cfd8ecf28f121794f3fec225cc9b88288d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988a5a84abe945a800a28d16d37dad08d171dd796f2b528ec1dae0a319214c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kalimasa-vubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4d3225f28e96f2e07ce90301f5547471e1aa2eddf488ba96f6a6c21746b0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebfa4e06c66f4782dee19b1672e4f84ad02f2e6def8dcb3d6dfac6a7b648367c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d926fa3fe715c3b71463d2d9b7afc2eb9efbe4ebbf69366a08018c7910e7577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1880636c0c081cd23343f4e5233bab4f2b8af2c149fb221b1a9e456e43835f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-bfugabafiuat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cf25f14414b0ef2a81e0d3b75ee330f35c44c31414719ee2e4044057fd5036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2442ca03380a8ec5fb5853238c65164b067cf579c5b5949e646c65d70567afd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...