MAL-2025-169259 Malicious code in trevora-cir62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa631775d7323864d12114c94b3d777a18532d14d7b14f82cf17bd0a38434369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165450 Malicious code in sabua-muyaig-bafifufima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86cb1b55612cdb93fb769912191494dd45958e6819d113f7f5b919c3f171faca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyuua-iadut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f3009bf5dfdcd263bcbe7f39d7fbe09b489395af5e00c37c23080f7167cc972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afaoti-urufyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74be33e153c60be63508946a7202717206ef11316b423199d75ee8068cce2a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd3484f5bbbcef412c23a1a24f178e646df9358fb06a11df50635ecffba4edb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a99cdfdfc8b142af37931918f2ba69f40db974d0a1457d6a2bf9388ca0fc520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguof-dusabo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0624f1eb8499685e977be3526fd7600ce1a7f5dd9771500706908dedeb6df88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tsesax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050152a8da930a887b81921648aa3796cb75a58e492e47be6ce4b7adc760849e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rtamyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013897a464f991475d0de33a9e6787a066e7ec91fe9b5e44d45b8de8110b16a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligumafi-agoubva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4253ad6bfd812fad6921c793222810f54d7134fe00fe19403e8e6390ed4d9d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gsswa-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1fe6181ae3f1e4efb6b28958b34cd6be845aa299deb89bbe527be7691e73ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofai-baivula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca002ee442459b167ebc6fcd7a7a11daf70524426d1285094a9eb52aa024bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kloip-akagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e09615d51f2245a976f14890a99d0bce8051cf968147e98f1a14d766189bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unofagoagi-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a064df0a6b4614d3eec5ec727ac726ad17f8278f8066feb1382e993f698be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9adee7d726d356098eacd25a2ab3a7ca98ad2968f07307c48d598e646e7ebe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6019d3df7465d7f4083337ce5dc6f9f0b5ae1a8e8efe51db4fc7093e071c3002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a096284a12a6394a6a1275e1c09da0f3dd323576617bca2b4aabb67bc87998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ksoffgad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6d119abe2425de6b6f3e54cce3ac011434c9863d88ab9e725e4a457108bc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19672595634c21d30e30bd575572d2120e1639b9ce0414a810486075ee72f1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/gupuhsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5358c757adf9ffaf717bb2b42db05144986181c27e2d690481110dc2c789614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...