MAL-2025-156949 Malicious code in ita-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2888a45de2f750a446b0bd2d211fa548b78879d794b1ad536ea53d87776d6624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154796 Malicious code in ewa-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168b744e98b5bc12987f23bf1614a4aae54587c4201f57247df782b8af5036cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-iala-maolui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a50c745775c0b617432502f83084faa304dec898e9af565ba940dd50d32061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48239d5501ccd47874a4d9b21adac67494c96d2e4fb7bbb3a3353f2eb37b4fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-ban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857beb4c00b238a20cff9917d1bc515b2014fe6cb8557955d1f3ef9a300a3858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gfobai-jigugmafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e471e4f7867aa9dc24e1a55c0b8e264279efb48985303ea675b4c5c5ec126552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f6b3d59aff9aed28818573e187006ccc7657f59499fdc10b22372296f736c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaisor-ddr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40de8be2a84effe1a442fc4466fe17a5602350ee57b5c3a5deaa1caaa1fa9e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158901 Malicious code in lookingan-namalaka85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3951a50835653b88dc9c28dbc111cdee73f92aec8aaa7bcfd535dcb87f6bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scavior-daren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952ff6f275c534274bd6e39d4caa2e00d4076db8bced8cd5251997cab8296ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/argf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b169ee05810b742a520e0f91358678ebf9845880654e2d59e2802a10ebffe2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435ad6cc082b751c5fb308b52b8394457018a47a3ac55d72999168ac5d088a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9101f2aaae051bd5820defdc1edc584203aabb46b449c4b164fffce7162d2552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159158 Malicious code in makaian-aniga-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7230ac43ff7cff5466f4f0eb0165880c1fcd12545deed440641913bce86437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151627 Malicious code in abuyilani-nikama-luyabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9afe812a1f01c1c7dd46de06a4606c11ec712eec4209a6d25b3a0101be3e579d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150026 Malicious code in @mipta1/gfdudgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc4634611c21dab150c1937b29ad251c0301f11f4f070895ddd5967378481bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160526 Malicious code in miracle-doki-uikayananbuamabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7923815aa47563a32a2fbb636819220d712bb0fe461d43a6f21f0bc7a76a05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154866 Malicious code in fadila-poke131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8965c20cd037ad9e20924ed246ff2a52e6997d4bea3cb754ff5dbf588cd1077a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160486 Malicious code in miracle-dibook-ikuk1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a839ed52803036cdfe870d7d413a5427d83061600dead9f4be0ec340286e2fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161455 Malicious code in nabuf-otimmn-afofsagagoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffb6dbd3a03ea3e6b1c1aa19810f55fdd3fbf797dcae5767f0b7248b992e693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...