MAL-2025-151399 Malicious code in abina-amugui-anucamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ec72a77a996d4d651a419b1740a41ba38121fe2ecd852f2b15cc021d4ed3a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a65dafec35da0abaac27893368df1bbc99aa718fa7100e5a2d1d5b900dc2df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151258 Malicious code in abiba-avbai-abunahbia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37262fe7904c9abd8e24dbb1520c6d28addfaca21f5897399078de93ad7b460d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161287 Malicious code in nabila-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f41288741b796dd8505ebbb21f7f5e095f0476b5ab46da091f95a7647cda3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154608 Malicious code in dian-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4dcd40f6c04ac5bf9bbec9fd2951c25a6700e365cf7c977f752ae211bcb0fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170178 Malicious code in uyafru-tufadt-darautut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f85bf26ca6c8c1d379b655299ab724e5eb74becabf72fec8c89d69082ff003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167147 Malicious code in teagood-manaki79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 787e0d1a25e83785f749119a7525d42a0e1d775940de52fda56bbd4a6666b65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fragoias-ou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d310650cccb1cc3dca01c75c4ce477e3c5b570f0f3811fb94a40d2a3aa6ae9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-goadaotda-nutdardo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47e117c8f9de26eaa8effb6468fa0db9af5dce63a9491316b847f6eb0a027c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-marzuksi-majay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384e1933535d0ca2b4322c9f25eb52c70979cbc472980792b656a072c632dd05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/xdz2rdtj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483eba19755acc71733826a3cc7f3120553f4ac7fd6d564fb830971fa4edcba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412a38a812e00a67f20d48b0a2a3221828f63b1926d191ce3263bb50e9a24637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff788d1041f716ccda64c5d4fdbb35383f18d46ccb54be00c6a7e975c69f8a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/eth-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96ad7c308b21e9557828f0db7960ef874bfbb8888a7d099aa45f88834ea1d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albiko-tbn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e23b1835a80854407632bc0ce71537280bde17cf1ee6bfb7bfa19acc1059cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f9b2f2abeadcba20b4f7bfce5779f782a3c93020b2c7614da60db68ce763e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13956a4e6e8a7951a49b260067054ae5ddf49f93d5468ae1802ef27a45dedec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea4d9786efec27cd7e202580477c80cd37034d65eea14e5689a7e8b421d0231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asfafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9141d94fc66d6f0a83a6f8550f634821c20440597a5a12e147ffc9da25e81a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutia-msiuyu-masdta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29239772a15b56632b332cddec7ebe06061d97f1ff8bb03b8398f3b5ffbd58d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...