MAL-2025-163879 Malicious code in nuilv-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b83351afa5829c62ba83f43c3ee0d57cc18eb1ced8786edc78c2849700ee37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168655 Malicious code in tealove-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 619e5b082441a2d54adffda2ea6ed684943469a90175507dec1aecdaa95e114f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164654 Malicious code in rino-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12e9bdbe21e3a281cf8d6af2315736b57f4924ab8b9f389d3af28110f9fa9ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151470 Malicious code in abiuba-avimun-abupumaavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b7104e41a184493f2643d4fe060e00380b23aaa55e2a72db7f0659aafa806d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe93576e307e1d02824e5846cf94db29b2ade50d946e937f59c079c5a0c4d3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88f0189622db18c34a3a402e83f63bd1f5b26aeba9f5971f8779814c5b78bcd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b522de55584c7090db74dbf0e7edbd6ada8f19f1f32fca99c32a7f9978550bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaac02fa7694dc286458195420afc77eb7b2e0918744bda3c37c8c744ce0d1b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0697e5b20317b40ba0db68be975992275586e2d2c2c7f5ca06c7eb5ee3b2c222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dokloi-ikalusak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f025c49b21e1367be3d717db40581f1c2fde3b6812a77fe4c98fa7dc5cc60f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38691ce3e6435950b39568bd08fef3db34d42f9c26e9f48f02cd849ae9d63b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4a1ec97303841ceb2c238afd04ddce3434c47bd341f318fec7095ebf69639e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f331af433639ff4c22152f3995548ec39dffddb603cb991e859ba4701acd6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3687844662ebf897ee8b6ac3a3f5bd93446971d0110e2da08d032d763678d579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-afta-fufff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2264da964122e8ad4428e2df60c53ded0383eb4afcb4b0f46f60047934861a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alof-danaik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2afd987ea58dd5442c537cc7052a62fac2a0cddc4c47577a8bff98a5c1103544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-mal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec73bae3e808f022b9d261c25af4579726fdd69d17c4060e05965ee577382f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2616104a2d616322af4fc0d59d43cb03cc7122ff540b7d69e41e9e207da6c67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-uyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4ca2a2103cb896e9bf9aa5b5395e6b67c237b6e167679a1b2f6e100b40034f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nati-ayl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4203873f22f6f88bcffb80b717889f253768f157cba300f936e8a0ed62716aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...