MAL-2025-155551 Malicious code in gurs-nurassa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef6735abec9e6783882a15403cdb49c630781de4ee938b2ab5290bd92a121d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158068 Malicious code in layla-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa7b8fecd187b11d2dc7fd6a3ba8d95eabbfa27a98d032ebe02df0f1e1f668e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150962 Malicious code in @miptaa02/taisp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487f0052fbfd05b7b39e4ebad96403f5bea973cc7b6d69ee6b4f317d539b008b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165053 Malicious code in rival-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b010306801ebdb9db6e94a32d35f4d925582f1b2bc007c3eacdf60c0a48d571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170579 Malicious code in yuda-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56f76c6dd58df61d56ec8d833d11e89bc2a14011a68bb22c1f5602e8278cb43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 742c1d26b7d5b54902b1219fcd05fb25dcfb340e86ec35f367f5da60b8361b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de1ca6916c71351b8324c4143e4ae2667853f8dfaaa584e01c709d9e591b96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/misra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214a37ad3ed6000d671e26aef2cf69e01d7dc3f90fe27edc5e7ed1d3e4655524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/astag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6f3489be4e389ea724b0e16499171ec5f0b07fe8a413fe6c3ea4ef843f3c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d4e4e4cd3af780a1179e2c7ad7e3922130335802067bdfea1c5c83c94d41b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makani-aiba-ufiyvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e6bf73fa730a8e399d039f80407f0d7681100d369e8bfef5fb867ca96a446d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7930141d4c1e4f6f3780a7ff897d9b02b991c4713d7278fd57e533f75a8383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4435e1027ef909bd74bbf4b00fe9663c81dfd054f3d6f2e3b1148f08d7e7e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-natib-yl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108e5dc7e095bc4b9bf356bb8250fb3ee226555f7c1db69341d730c2b46d935c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/uywu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c899a705138c6bdde90faff3fe9df314faa1b3131226298bf4fe503f71eba6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-afosaf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703805d04bffa5bca38f5acdf4cc00652d17e98d9c49a6b97acc06353d91d016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demaf-nutyai-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9636c2644c3614c3700068b122074e465da75b788b9c58a30238f8c8022c1141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9085bc9aa13392c4070ada525cd19803b63a4b238d4abda6eb6551eb3e544402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8abd962b58e030b939be49c4b73f1a3ccf82d84127777732fabb9f14a4be9e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-naki-upsidale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cbc6ac0881c8fc3f5b02670121134c42be501ae0fc1dabd63a96e1ce8bfd3e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...