MAL-2025-153754 Malicious code in binai-otaima-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e75e4ab535961a31d1e0b021e9a6f81407ce25eb97b900010817395570a84c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151778 Malicious code in aciyua-idut-dajua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3905eccd674c0752baae42bc2fd23de1e0897903e6cd8a9d8d25c8f519b67327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151036 Malicious code in @miptaa02/wqh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33874a1ac8a6cf1b4e4d62bcbc3d47d23db3526eb4986f4bd1e6e752fc52832c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152240 Malicious code in alfiansyah-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62205bdb4333e53bfcdc8afa660f4af2b60e17344e546c41e44f066b3f5311c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158443 Malicious code in lookingan-nalako34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d750df52f271f91c9b5351d13a2eacd0734088ba9b154b20d88bb0618e751b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bf2c6d080fc2908feb0a10eca865c293a1bbf927c14ad254f59362eac01f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carsa-rdesti-butr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f7a2219c0a794e54ff0b142957255db41300fb6af9cc767a76e030065c6661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-foggioaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73d97495376391f783b0f3ce4a233265cbd1bfc64248c08e8f78ee83acbe71d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8574fb6e59f4368ac8cb07e9ef08c9753e8301d6467934f10e1a4ffd34860e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibuna-mobiule-aamainiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3189984ae58752b88cdcff746f9f446529bfd1b81916c359bb6e3b16ea91b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e00eca1e4522671c3afa373f66f3c504e4157558aa9c592a53cec88e1546a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiala-magolani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979d1a17917e0c2abe113b68a775bdb19a761cd71fb5ba4b7e9031fc13b28c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-aiusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75d5496798dc2b42cf187da2c3f8b5356831d74c6c5f0b8fc74a9b5041440a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-sas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46fb444fbee87b7a564d843cb97b008950b891bc3d0c23190082b4aa970e90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e64b00f01fef8d38ed9e92610d99d04c5cf0c4dd07332db32c4b6fb4f31d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c62fa017255b149c6fa4968a34f162037a2fe67247e2b1c12169cf832cc7c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/idd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df6d8c2013e24e3a393c6442f566c084224643cc946955cb52be95058f0da9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilauka-kailbu-kluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67ebc4237ae26f8fe2263c44e68bd53344f632ffa5d4b1a119f04816978feba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mand-nofty-muatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865a8a88d2ed7426962db79e8d94d0fa6b1c1c759c51d9350c15bae87dbf6e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/stupid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 907c8c425aee0e4000f13c6d10b66f0f5b7d20f963278774ef94765e182fff90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...