MAL-2025-166288 Malicious code in sunden-diak-vamiaakalam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e97e7c25e3aa90acea5c81486677f7ed6a40239297e6b92abb9b13cee25eb88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169014 Malicious code in tehah-murasaf-adsfan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23699e7b60d01140189aecc9920284e058f7a2452fe2fab63c9c44e9acba95e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e11d8e983479f4d2e1502d9504e5e81f950c199df6b2859cc458dcec7e114d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-mgufuf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2239f6b53920815213cde20048a4ac3e74059d16b23457da80bd2694f68bfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b38d049a8edabbd0e9176ea0e24c6915b971b84de76fd22cdc3e58d3dc857c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c2e7b0c203358f6e8e4bcd710a37874a094b008bb17c9b5d8629495f8c6cf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274c07fd9e12fd1e06849fe5a20f93753cd1e3e3ec3077b2f08e48eb2f398e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158949 Malicious code in madan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba38d4c8dfc78ab651908b5e03811d27c278b8c7225e7e276666e91693c3bddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163074 Malicious code in nokire-namiresan23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7720be9e853ad7071b7b27f3d91854ac615b370afac380561ca969352932ad09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154868 Malicious code in fadila-poke133 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b122dacecc1e3b78fce2efb868a4642a44c50fab41850cb1b2d7ebdd8e82e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d901d0948ec6c43ad27e577f39d3c7a670f34098b490c7e780f8004b9caecfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162100 Malicious code in nokiraifine-asa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920ceb9e1af3212f1e43692cc10e81f23d8020df58c2321389aa0422bfd20c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4232a0b83ef4105c30c595b513a91e837f3ffd90e3ba2992831a7819272689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514099f0fea639397815d013c2c249757d46a5ef4c4fa65d58e79e70186f0852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ca-buniasn-junio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2007ec703e734811df0b986780f7601a78e0b81cd3f3c90006a998ef65dd402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152401 Malicious code in alita-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d46d0803b6af9b7ec6ed6803af67c1f08a144d80ac393a03529067870f7178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164275 Malicious code in pilvaika-kaliu-nubulikvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae20ef7de6ac31eb49bb8488a67c64d33622dea0192400af4eddc9a9854d6f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162526 Malicious code in nokire-genji38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfc602aadc0b148d57ffccf505f803c37c5fe9f2bc738877b908951a36b1b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c41fc8e29d79f1dd6aa634c5ff4b58270b57bfac8a8d21ae5240b5c68e70c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfdada-mivafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c946008fa3bf62ee73688b02dd0168f88d8d8bb87564f45781499899605cd14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...