MAL-2025-171971 Malicious code in universeobserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3235a32aed71ccea9efd1114d4a3d2798a1b4e093f251bc128a202037309fdb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170777 Malicious code in akuuong (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374639329cff2d34fb2c42d21bf2e2cf1f108f52344109d0658c60fcfa79ea2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-mansis-nutyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12e4e99518a6b3eb054592bcf08cb3d4921ed4aa21ad3e6ca394209e0ba42ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc635cb08a5075d60db428d10d515fcc4f921d094635a833884e0d1719c354b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-treua-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969e5bd440734c14899b862bee49d851fac31af4074570cbd5740ab5e2004689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152285 Malicious code in alfiansyah-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c10a8df6d9b37028aa9e72023bac44aaed9283bb136729a2ac700c528674b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153084 Malicious code in avminah-fagias-dfigika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81458851c68c153f8a2b2d085ba584aaad4c1ff9f96a2851e53b9a398fd15b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157730 Malicious code in kuinsu-lubki-nasunaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2b7999e4fa3d12d8e8eabe2eca8cb23e79ca9f0a9f168a06c2fb94820dc080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151019 Malicious code in @miptaa02/weaska (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8bd090a77c39b8bd2825b17dc89c0b1491e5fa9880568e03e66c914ef6f7f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165010 Malicious code in rival-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1e4cfd0174d5252cf79fec5061077b2d20c7a117cde59de86de734a86238a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164877 Malicious code in riomda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a128a1e9e9661bf5fe13b12740eeac904f8fea27a9662663aa47b463d22a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157971 Malicious code in lala-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f82c7f3b521eb68a6dba7b1d798cdae2f5df47365ea39ed1d773da4c2c73a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167101 Malicious code in teagood-manaki36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172bd60b476bb0a3072304e6b1f962d9aab8deaff60c40e7498242ca1d19fb31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167378 Malicious code in teagood-nalikami106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a309ae569da2d0f4a7cb642e8fb8e77fb08dc16a50bc59868e8f977c2449e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150478 Malicious code in @miptaa02/adaie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08f7a2ef0b07b07a7f94d81a03125cae4070625aeabf46ff2ca54904f8e7740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minus-buipenajara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebadc9e2924b32a42a9fb94214c86dcd8636cb385ebbae61dc3d32832cdc7b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f51043a409db5493d3da7924d41812023b719c72c7f4775e667a55c13e15de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhayu-tadumafaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89467d3702529812a5c75789cc51941e20f09bcf72417e51ecea1e5af8ab3843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milaoa-dudio-nsastuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc521ce502d8cd92683d3124e27792831156421118f88df1279a4af6b186688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e769815889f68c618f6a24f91ec402b2447fa0ef3ae86522b4d7c8142c633a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...