MAL-2025-157617 Malicious code in keyla-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60ee9d2f711a4550e86541069a561ef5413c1074e5edacd8fbf5345408a4b886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152881 Malicious code in aril-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaff9788645669070bd0d7f86d8c3a1e6c1beb3f05e8b4e4196ad3d873635b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163701 Malicious code in nudela-aaaf-gaafodfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cf915e617fc45d0166f9d289da55dca38c478e519bd959925906341d2c39e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160277 Malicious code in mayfag-trega-hijau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bcec0ce30837ae96b7ad719f33e515fd8363647a538b7eb9f34341b09d02ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164014 Malicious code in parwo-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46f41fa14f6680856d0a4ba42541747e7d25bf107ee4fdcfc53dbd5fa4700d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligumafi-agoubva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4253ad6bfd812fad6921c793222810f54d7134fe00fe19403e8e6390ed4d9d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-manar-nabsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f280391d9b5fd08b34dee542c098a277e6dcc451bcde4ee2c7cc2701be910d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luaauavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba39f6ac9a832f2405ac9a933328db8b31623fcfc2c8976034297aa7014d00b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotumafa-anfuaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74993174c639ab2d35e1d7bef8c34d378293e5ac77fe0628aa28f21927193523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-soradi-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205bc92f2e64108531ad7e8dee7f2f2b867f11247a5e02e78137a231dec36122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansida-nomfdi-mungu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daed987231af326a5ee253d630ac61ffbae01868e024fbd5aa089488cc7da7b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a4c5fda288a42df270c080d32a1b0c5f8356cfe149fabf94dc45f338a874f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaihzmi-kulaibnisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2639cc40df3a434bf1d49a3ab057de0ca3dfbe9f21566aa7f887b1eba963940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/xsdsoopa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c45d0172a225ad4baa3d4b5f1919afb7f13085c0df02d247d193f89dfff75ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be11ae8a200c96cdaf0c54ddfb6731714b136d0a46f124d872c6830032fa3a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igamino-jimgugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1e5ceccefad3485ca4748d8e3375565762866a0547e1ce51fd10eb9bc1b042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5486d42946f06b18c0b48937c6ce6162e5326d8aa9b09d92e1604397a2f7a544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5c0ef7f12c801ea9f0291aacbd6cdf1653184035d41376f32415b3a455f65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085e5dd25901c1c3a49bd22adaa2420e30afae5386a1f08f81b3cb95392b7714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehaah-codfd-mutar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a892fbe319bcb9c213fe6f9100af7dc4a04e9cc9cb9403921be43d1ab8607baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...