MAL-2025-166363 Malicious code in sunden-udik-vaklikanuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4f104d7c4e43600922d6ca8074f9e772ad9f998171be168d37e43a83e0ac02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masioaluan-ofa-batoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0ea84df546a8226902c468fa23440f7ef8fd536bf6430a51f80c2c7256dc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aln-tuunal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d6f59ff214f1f60bb3182cca209f8b6f470afc62d729aeed94594434d7d63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0469ecf0472465f2c8789b10dd1b9b5d00a0165ad425596dcfc2453b76eef8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuyadtasfag-amaadnadsatadfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 092689a26756584ec2635890a1802ad129150b4f90d478b3b1ba57e9f57a73fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehaah-codfd-barasgew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568952feb47db8d742a48685c72a0f034442c8ad9ebb7d732fe13330d8ebddfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156610 Malicious code in inufgi-goa-jamufia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022a99a10daf7d938f4d19064f3e68394e8bdcd4ae59b1033eedc4c4495ca2e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161069 Malicious code in musta-bata-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0cec455eed1d5918aa0e2d642967dbf0c24d0ee25dda5b2f4bc3cd6c2f6d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-nutayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb4b3fadca584a08f0ff17f992573681b6c43445cdde1f66a8b7a03c385ca7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca6b7a6e8b358093501948c311fdf9ec3f69f039f2c2aff3daf78ca5ca2d0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167911 Malicious code in teagood-yakuna51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20dd8e2424d6491635d7c2f05beb8dc38ea6c76a2cd1a7b648a705cd5fa8d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274c07fd9e12fd1e06849fe5a20f93753cd1e3e3ec3077b2f08e48eb2f398e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164051 Malicious code in parwo-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a614b8efb7a2526545c361c26d8a2df6afc9e4e15cc19c165adaf675a0a8989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164171 Malicious code in pilka-lniu-kanka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82218de0ee34bb708dd5431e2a14ce5359b7f0d951d1f2b60eb4aeb0a4b82ecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cec7af4d52f4de16f259d75ecaa9ef281db3d3c0fa6135fdee9583f044f65cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152230 Malicious code in alfiansyah-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28db6404cd0d2f4e3902a5221030b1e9911008e4d5011c908bacbd13435bc428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165909 Malicious code in shilang-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6385bb15d619ac34cac4a04d67e798db52a9e0f0a6ca3fd4ff0cc7717c9e0f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilau-akaviu-kionaliba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8564840af652b088fb819005e8bf90db3ed354d6cf48841626e91613f5cc63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sorodadi-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f6a7d898e4f49507109051cb2917f62d12920907639f8129d3d348f0b0ad6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fasak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433e94799b1c6b5dbdba37dd75ab9cf202fa6b10b2d29e34485df876ecd36962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...