MAL-2025-156689 Malicious code in inufgi-gotmua-anabnzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39898ae8af192ed0b8e2c4219d58cd4fbe3acffd372155c3864b2a7123cbf2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159701 Malicious code in mans-manapa-riskifaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6799eb5f199ca56d42e3669bd01d23fe858124b33d2e7aeec16651f7df00b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magfu-gomumia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ae09b64dc4051109dbe462e5df349a6dc05abd6d026a4f64e1ea819e3c5fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4435e1027ef909bd74bbf4b00fe9663c81dfd054f3d6f2e3b1148f08d7e7e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-taicu-busauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446fadf80e48a9d914d22c063502349d10d0f47124011a42fb9f10b5ecd5bffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf5b86e62d614167e25f98d2e50479f5ea063e0091f3bef926784f949e2639d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milis-amisodp-muiokp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd13b436931547d9b6b9b047ef21c75d5c4624cf411bb954cc3b39ef0246e30e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfdada-mabadva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde3787ec26ac2473b6f643016f18b474d505c5173a16f085d242000b47ec74c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotamava-aaana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d37c0809c04b68eea0460c82dc441f6960bb969476bf5c7bd780d492fb922d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-sea-sswe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1befbcc9beb42fc21e33902c5284573425ba31360ada8f463b9be34761d727d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04799e06ea2ca4aa7cd19ad274e930630f755dc6465e8592277b785d3805f54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albio-tolanan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81616201970c9d5a702318c4d4afa026d9df5707cab29982b8fb299f9d0c156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b61ca3e1c59ce28728de34beb8dbac8972455d95780f068af223f5047e02d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bfbe2d3e3b55ec07922238b215ac61131375d419928842a534b2ed31c9f71b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97234601ef72c708c6285f3770e09582f5d13fb825d306af2b500025eb77f884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikn-misualabaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83af1987267f371b35bf3102ced7dea18d065f7fa4af17335bbe4264949fb09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaaior-dra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19da8f6f781d1eab6c5a95d1fb61915285948d73ed9dab610b13f917854db282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nusata-budnajsadab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9dc18dcab9fc1c17b55e4eba61dc958ab571833cc81e41bfd346ee083c7bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150220 Malicious code in @mipta1/sdada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f538a7a3facd8ff339bc12f068cbcc35b5fdc61bb4b17517e65e814bc3d412f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169075 Malicious code in tehasdnah-muaido-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50dd5d8c9633c09e4e38f58c11aabd9e3ea6559ac6437e7c9f37047b7b7799f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...