MAL-2025-165811 Malicious code in sfga-trud-mutiar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019fd420e4607db13a6bf8574c6716bfc36d51ee4c2c330a23109cda25e0437f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-ignono-jaimgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866362308fddd230e259556c67d8368b32802bc63429330fba38d619953d4c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de1ca6916c71351b8324c4143e4ae2667853f8dfaaa584e01c709d9e591b96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/asauig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844b4f2abfbec7eaae236c81d3d0fb6d99c593b648c895e451dc71f8ad30ff67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1b79002674efd371378dc046f81815f33031d11e4c0781acd414b45a165de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abibuna-mobile-amamiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f62beea9004a570c88274d7815b898e0066a790b4d4d34f5741094bb70ac1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-lukakmlaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe1c3bf2fe3b72e50bec462567f87072bb42c5f54f89532e67f6ed1618db713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lista-atumu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e282871f46e9faf52f7ac1241d303ffc40217140f16689c3260b568159be5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytdut-dna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 680c97c12541ff966d2c7f0bbd77751f6282a5314501a024f01ae2861f4e2c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-nuysipas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03646916c675563dd28837741ce9b4b2ac25b4d13682fef3477d94e5c69456c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7cb457f63c682fe2729b58bfa35e2e96791398a1c189bb6d8932cb22a81e8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d686e6d79156cec4cd7e604991df796c3bdba9aa1658fafe15b8e595568ff4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutrio-nuyait-mulidao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7d304e908d95352c4bd02a3710de24cd9568ec963be4fe6f36ba12b43425f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector decec8c496674d7d007367314cd64597e8e65c7e5f4e83463bab14f071892093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibuna-mobiule-amamainiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f77138502a73213ecb730a283d38fdd83302f81963a8235b7b55b0567f967f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160302 Malicious code in messi-buysa-tusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487aa0b56711975b15f16b8382de878917368c377f3ca44239dd73fd14849164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167623 Malicious code in teagood-nalikoli66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d383b1b9800ab472999af9cce01fe99f8a06daa2d0a9fea3eece1a9d979e7229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152164 Malicious code in akabia-aligumafi-agoubva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4253ad6bfd812fad6921c793222810f54d7134fe00fe19403e8e6390ed4d9d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166505 Malicious code in syahlan-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1b6b7d3b15d9736ecdf829744293fa4eb8b187953a5518e62c15e80c60d5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166282 Malicious code in sunden-diak-nulikanukn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfb825c49352fdfd7a5a5af5a5abf062fc25680d6b6dbf0fa9b337e77b1b6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...