MAL-2025-157398 Malicious code in kapa-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1ed4dae1b7bbda8d8965b2a223d88d2edfa7d0c13ec68e829ce26e47a7e512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157549 Malicious code in kentung-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647003763da1747c64fcdeaaac53bd90e3115a4fa839facdd0df861c19409ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e4851a566a5b4a173195fcc928cc8d7ab39f18cbd39706236159ebe09996cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/qwadxxedda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8757d4189b61b60d06ba953d4abefe9a9e221d5ee8056ebb72b75845d663469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d613bc6abd5ec6966bbfc797a92c738b2b5d58415241e5876a00aed0a6928779 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analsia-akifai-asulanini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f17c6622e361b599d6ddd0953acba1f8e7fa57f367eada409ab747957f5f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e58654ebafcdd68651b59a8762256b0cbeda1669bf5ef113981d5f29e9d87712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/dadfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c00e54b29699040e7eabcf444c969e1dd6b1f9372a24350ad83163c7e7ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-vutsa-butsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf889f317b63120f201d9531ca58d466e32736f2a63bf5c6c9902ad168e16d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7768ee48cd27b55577ffca3080bee832b1c8ce2d93672c1b392e83b0f1465f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-agfimfagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e49e67e31ff6226ec192a4335b7e85e25fecb8b137cff5a07c63764e5919098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musik-dai-buys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2015da52b74720e089a6d542d312d5a550a556464f4b5135a646e858ce4c5a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fasak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433e94799b1c6b5dbdba37dd75ab9cf202fa6b10b2d29e34485df876ecd36962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59bd6bb2b3aa6186d6affc401b7b2314692c304e39f47b2dd0aafbd368343f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a56abb9872a865ab1e8480e99752121ca78dd1a61e2ea87e6b4b6cfc5d06ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-nutayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb4b3fadca584a08f0ff17f992573681b6c43445cdde1f66a8b7a03c385ca7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f106eba1591289b3e13d226bb88decc061214d569e84abc6fd5a67fc70cb1e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6224b6f024619bc3d1ed933f5a7af9db7195367481c0aba92d6997a114e4d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0237109a06378a93a0d1c36129bc7a4449a7ca66e7972acd3abbbc913a9d187b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytdut-dna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 680c97c12541ff966d2c7f0bbd77751f6282a5314501a024f01ae2861f4e2c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...