Malicious code in aiboloa-miope-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07dd54124cc0aac5b58436b922b6af42c71e186058b8338e8cf90928153f831f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bafai-sunai-cuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04fca612a121a1853c51c82e0d3a9163b5c63a5dd2cd850cc9feb2aa5c3de39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173312 Malicious code in buta-faag-saiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2679098d5eaf7411734c5d9de81ab57eafd86cb76a450c98ff1baa1e48b73e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176331 Malicious code in nokire-kushina11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f255e19514cfd1c19e12a16ead5d71d1dc18e8dd31081ca1ebc728a941572fbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176246 Malicious code in namacda-kangtasa0-nuvayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c077bbebfee53a70bb19d9c3c518d3346af6bad02c749df302824f477e784f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-gulipad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5a78492c48f5b20de4a5871b4e5679482618644498a2ae3140af395b4eae45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beardoze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d09b8e59d8259392ca51b7775d2001f26f19ba8cb68f1834c059d9e5ff22ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foori-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35be5fae788714dd3753c5213c2703ade5f5ec11e1a172c5fdcd72eb042a38a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454d3d0d6d5f842d4c82e6795470f4c212f8b5d09b75d5590f7b442d8a251711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166691 Malicious code in tadashi-ytu-buty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3db067452e75f21039cfdab9e86a1ac30dc4b4cc641726dc0f082985715398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170052 Malicious code in uinsu-lotsi-banibauliam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9ae68367cecb502a19db7e599febf2753499f6149c1286873af09ac9b7a1c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165567 Malicious code in sabuvauakli-nalabulaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55bb6dee3134755dbf9204c4fe12beb191744d2512af24139870860ba910415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154317 Malicious code in dia-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543a514968443d172c439dfed7902701ee20c95cc1458ec8a6d1f6b39482f010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165025 Malicious code in rival-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ec9879c4929e3a2a7990fd0ef81d75a00207286baf098368f42f1cb7437938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150556 Malicious code in @miptaa02/dadfdia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7430ec45b72a6f4675d945029820d2d7b1e0738f7752c19650f55d7190b00e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168021 Malicious code in teagood-yakuza61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3233c2a30487911d7a544a3493e7cc8af26ba55e708a84b9f0d898f3d0fc57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142075 Malicious code in envconfig-ini-zephyr-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605fe81490d64b2c1a772699d84c2999f71b970b02bba2e93361a77189f5dcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140138 Malicious code in browserify-quantum-puppeteer-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0001b5e1e083b4a1f3972c69957ff451588428b9242c25d7a98c437e15664135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-fornax-csrf-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29fe4511695ba881d70cb9d7a2fbe076c235ce8bcd732b3c2f2cbc7054cafc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144039 Malicious code in juno-style-loader-sedna-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb1edc4673f0ed82d4bb87c438df25a1a79f430859c6849eac0dc14a34c4644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...