MAL-2025-151843 Malicious code in aiboa-moilopie-aromoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb9091a8dbdc24a0eb9a7e86b004335e6b0ebfc7bb5bc552a4ab30254e26ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151547 Malicious code in abu-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fbf0c9f59f6c6a6442a3a8ae034f9adfffe2502b8be0b5adf07f751a42c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170252 Malicious code in uyifua-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ac35230685a4d80718df9e5e98561e495146d51c11c24344c41fce31c2cc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160193 Malicious code in masioaluan-ofa-dbato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35fc48b7775fab0b5f827d8bb27005d0120c983c58a434e050fb2a914fadc38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153388 Malicious code in avminh-afais-fogoaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6732c51c53c953f4f4cdf191444fe877e529ec6d7453b332f05316bd9f6aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158219 Malicious code in lintang-tea58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2097d598477f6673fca421f9544fe733494c445a93e3cf5cc1f3cbe0814f85da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fru-fada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a6b7e10cd42b04a9f59f2d469d299b3ba63308a26ac8b7cf3412cace6004b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3948d8f23d42b052821fd980b46cf0e5c6c69fd4667f8e2d5a1b5ffc3afcb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a1753769fa99be19ef590bddf7db8b999bcdd0998ea086679beb958a6a253c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotahi-nalu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c9779c7cb7cf3898c1985689cc12367f27b372cf2ff49a90a85384210b6f8cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kkbhd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef1edbf3d48803a50c9d7ec887ef0cb5a368461ff0d2363d3ac7ab74fc278e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-munaroha-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247367f8e1215f47e41e0909f5c3376f64644cde01ceb5b682e3c3bba9654772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoimban-iagafaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f1b6de9bb25583101ae11697c3e50c4061952fb44ef5e0b45af67116b7aed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb51e1c1685f3ce813dcb03a313d5b21ec76fa572cd4f085f9decb5e59850fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afoai-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c06759b8b9303c5d408330f2a490023c8cc954d9e4426b1293a1af3488a218fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir145 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15899a3026cf0842d9b90b91f61ab0e4223c033a750c52ed057ab926cf396411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demadadf-ncufaivo-adudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb07c77ffcd60e95a30f56f40970e407506d08d90b70bdfe958dbeb3a707e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf3716569ae0d9383aa94ed0582b292cfbc81794541de739af89ba0225804ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poli-akilu-lunakina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f686adf947657a9de75475336ab907d273fd6f624712ddddd3c049a3affaf0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masako-males-nba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badd7023af3e2302abd0fca71841b2848846cd69f3bb0e467ded91d010619177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...