MAL-2025-166584 Malicious code in syahlan-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11864f07ae9b8ce74d4f3bec68a09d3e7a93802005beaa3e9ae225ce337e2e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153615 Malicious code in azhar-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03fb4b79c2306cdf2cfaae647cc623b7028a1093cea9feceeeba4c0800e41ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152128 Malicious code in akabi-alfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b436be90fe76176f870a282484dcc7be9924aa6dcf9385351855834214227f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c107e07de1fc378445374e7dfbc1c925148c0285eaebd2d2ffeeb62b2452b2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e21fb958b404af11b598adba2b6d551f764bdbfe8b697684a0906ab7459a30b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7591959f5d52fee529ba7ed7756bc15a9149adfddd73e257a84a286773153ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afat-usutafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61358a56ed027b3d5434356eaa324eae5eefaadc4c501a8e217229e3f5d9e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 382d722435adbc78cb1ab592659860d0ea64e92df475b2c4163ba98fcf0b251d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4682f39f318473bccad3e644f2ed4f532d3749a89cc4b97acdc2996dffd5017c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotmua-anabnzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39898ae8af192ed0b8e2c4219d58cd4fbe3acffd372155c3864b2a7123cbf2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mayfag-trega-hijau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bcec0ce30837ae96b7ad719f33e515fd8363647a538b7eb9f34341b09d02ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc971af2981f2ac5588a21d8b50fcb060928efaf1af0f04cbc285784d54d6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tpokd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da92de720d784beb450eb1beddcdb45b394823cd5554bfc7259736c8a444cddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e04ef4aed788f6f2df40e883f890c1ea6cd87dd36b44cc1de2df9c287d033f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fad970e9519e11e4e46ddf52e89b0a2218c3f910f3d07705a8908be671dbd3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d50c18a29130728b06e4b2c64291cbda6e83d6708b8dafddd2754f6615f6f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-amuaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5a03adfff526b8ed4630721b9853babb2471b01655ee9fb4b5e62aaf20b017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tdisp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d774a3d1bac4b10e73e7bf584bc487a3ff818430a3514d158c8a2270bb3a447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51aea3a2de31dd035b1b361e1e81cf0e1fd37701820c9d85e94b444fd5431e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/xfsizx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c978259b32227519bd0adcdb1362ebe9ad09d8293f91cd8ff2a8affee983177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...