MAL-2025-165406 Malicious code in sabua-muuyfaafu-dafumfufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43df556eedf330bb0c4d05ab2bc74c7343eee4e051879d567b3c71c6149a8e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163381 Malicious code in nokire-rara88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e22fb2f636a35b7c172fb3294597c93a0e03006627fb3bb22bcce9635b0e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bfd6e64b483aa47133e48cb9e32d95b36b860df07683bd15613b5b5f2cee4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929f53cb0023b24915109bda79e7be4b4d66db6aceedc566578fa15be830841b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afigaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2861c9c0fd6c18e8240f923ee5186d7ec070cfc198abd710a3060eeafb6bf2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutus-manis-naudatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bc65df1bdd30f0cf112066eb0e4cdcb3c5b298f26c6882fb4f04b5abdc1f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nanali10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea0ebc07c3f0ebd5e1a3a9fb1ad5b9c30b61fb5df4e2407d3262451bb6a9f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f99d318f68381326f46e767cd386e9786b921feb5147326d8bd87cef89cb8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf9d78239ee6365870fc66a21b1b5303de46ecbc3ed7570d5a1a519187c620e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pgfsa1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85f13f098e3ef3970f70a2ac6c446de999a0a2d5112b06460424e7cbdc2a9d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4a0198a79ad2b3623c1557958c5c623227b50fc51efed0099f7c5eb019f81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 477a2d13f6bc7150c2ffe794f1d59861f4ca973fb9cb7dd8aef9d4f0efc93849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e720996f55abe258427543904e19cb6c9fc85d458e89209c4b81b8864a173c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/hykg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9441bcd2970318dbfdb5465fb5ddb9b67a9d6ff6bfcd295e43d9c6d7a37fb53c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defba12be78d529bdd9565c6cafb43e497147fc0ee8cb3748737d74e3f2cfcad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-daa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86eb0ddc22d9c5967e9c04ab458dff532c587cbf3d8c1f38a44bf40540963cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogauof-dofafsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4148722f96580d82bd4be17af904c5fb03cd2529efd4891fc277adce86e822e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afbiafaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cca23544d93f1552e2e6834b0fbf88003f9c0f4794edbe3fd0c595e6ffd041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabu-nali-lbiya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d40a052e64ca3bde711323bb3c5983f00ff6879661eec7b1c8f635401836e373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfb37a637434def3ac8bd5444bfcdac210324784022e5401836065c29d18f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...