MAL-2025-172652 Malicious code in aaaafri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a343c5e863c9d385d586fa6a48695790303ed2ac6f685691938b5b97c0aa1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174347 Malicious code in goodafin-nuiatua-nutuyagagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5596fcc0d2e192121b515411e781da3fd196b431d4007655615448e2f6e98878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175480 Malicious code in keke-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf097a3452cbe301c446e679c6a4bb66f15b89d795d4633c5bcbdffd9462fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172061 Malicious code in apasih-led-poldoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d533c9e8b8a3b8ab48c42856844435ba4e3aa3abb1084aa0f6a9aa0e57485d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r-nutia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd384c0e10c403027be1722e46dc6aacf45857cb5d29f208ebbccf0a9953e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-gn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929aeea438fa3f4f23fcc72691a66275dbc606bc40e1dcf74e35de776d734d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172076 Malicious code in apasih-ledan-pukak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df7d47096db9778926ad28f972242c8b255d30969f88ce1d0cbe702bff2dcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172617 Malicious code in verts-otio-nai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae9db81e67ac96a20c6b26749c782c73680853776ce6175ccce8b05c9e2d66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehmanakram (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf768dc279c678baec912eb7f045b9927e99d6877515c262fd77e299d69f5d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ajmalfouad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9163ecc9f07a4ef7b391cee5063602a03f2d54c45d0fca1dd230f2ae854b24d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170782 Malicious code in aldorev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b095a6457ebbd140133effc5517900be075f2686430a3508f15f3440cb81e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauhfu-faqifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67192bcb20441bb67e81714886b86ed20cb39034a3ee98b33c8e26fa0c830e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/kalad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797d9aa4b51b7d2c1be73bcdebec1ed204325c4b76d8cf5cc70448e4dc17c434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824d99b828ae275d75ea74acde2a97f34c6966c205cec9279f0ef591ad5abdec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-naai-agamiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e68f7ed52093f24448664de8fb49e195df6c3caba2c763e8ab132ea431a814c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d55e6ecc47c30ab19f59b280c495c0cf459f7fca3fcc3cd7086d4ba7d2cc10a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc79a1cbee0d398709df6eb3d0814ee996f24c2bc1d09c763d464f8e998e100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manila-ala-maoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e519c1fcdf423c34192404426fbfec86da7bbdfcad21989db85d727bcf56c7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea741a20b56ae569b779b2acf0073785ffcb1e9a706ca660edec45b0031bd6fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke588 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7eb52226fec7da38db7a3968a738ab1ec727c6a167978686fa0eb8f54c20b8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...