MAL-2025-169736 Malicious code in uinsnu-lotaizmi-kulaiksimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff38febe64fc75312286816d55a65c266d55ef5c49a3a6f1fd1b62e213192c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151693 Malicious code in aciaiaggu-idat-doauuufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75717b3ea31fc90493215ace3a9ea8001b7bb9d5ef7c8930632af6c40385786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161505 Malicious code in nabuf-otin-agogasdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397bad7a5862a83f0c9b416b9e63c2cd1fab0d4b4c34b7b305ace4c00e1f6189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169900 Malicious code in uinsu-losit-bisaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51216b2089fe1cca454329753476cff1ed0a6369485353a441bfa38f8f079f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc971af2981f2ac5588a21d8b50fcb060928efaf1af0f04cbc285784d54d6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ae2343fa172595a84a748818182ab8939dc3e54c99fbc002518b364a629b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c88dab92de0ffd3a4fa5fe8653f8320544ecc17fed8b9082a0b20683e25e65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b869e9301d5aa3e4262da9416cdb7d1d1b416fa0e304a76c82b31fdcc476b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgfiagangagaao-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb2a6a2fe838ea3b2051624fe9579a01e110461fb963274187e11b78ac45f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1cb9eb611f96384d2692c6848f6a62d3b3b0e75ad382876a6e301fa08e07fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47027f2c517e22bdf6d0af204dcf99061f12b5830fb92dc2ef17eced99a1015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b12ff70e8c825dd9744ae449f1c3946b21f9cbcc2c3430276d15ea97fc3a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alin-tubinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33df6fc1b194768c2a69f82068ac1464c2a5b7ebdeebad94ba3e317a6a54e33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badab01cac9dc2a5b1ee39402893bebef980fa5ad876d12dfd46c27eb83422ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdosafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52162f730f34745434ac8d71da8e47dd364cc2edb03ab63afed62eba64a0565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e831420a3c4d6281e04a7c3898da3f0c7dd08e3740a732a53c9fbe7e7feab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-nutayua-tufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f94245973ceddbc1f2e02bd973df7cd403d64cead8fe5b497ba291e671db21ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09866bdfa45e78a9c24137e4f1b5e6b9f19886621df8e960d735881b5d79fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fomfafaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a278ec05af3fdaf2c0dd56bdd5ddd04dce506ed8263dcd46648a030503dd96b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sfdassr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3289c28eecd88be6b766f382483455932febb65f92813548083ee64c08187c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...