MAL-2025-160205 Malicious code in masiolan-of-doto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8832dc5b2010b0fe909948735878280f8cb6f33d50d757369dd81940b87b0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159511 Malicious code in manaf-asin-nadsbsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a43e6618b58009974d740536db4dc7ee05f9d768fd29a37811b105d25d643d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168958 Malicious code in tehah-kaliafafn-konatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429195d9b5b449629b96a0347d535d020f3228e39b9be72f1df2d9b997591b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167453 Malicious code in teagood-nalikami52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec76225cec8f0a8f466b35fb7f50b61e29a3697437bfe55b872d4fd4a3fefd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-us (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744ca877baa45f737af0da700786e4c08b94bcce8b2e82790e2571fcf56b805c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safifda-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012cc6e252390deec94c167ce6ee68829ad7a8c9d52b556771b98c5239e760ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scior-nasuiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eab0a69c06132e835168a64d1cc6fc784b9a731ef3e611a4e74e6bd0a699dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fagaius-fofaguyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381b857c88a7161a044a03625cb4e41bee81a07656c2556e023b097813cb9ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd1eaad4889df65f251606d54717ecd53ad2d02a97f8fb638683c0252926403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73be9f0f12c804a5621f6e59a9edfdc5d3579b10676e363aff0e6e8074991116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avbai-abunai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9858004696b672b58ef3fb68363de9839df80f56baf884c3a2e6b8970d214b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukonta-igavugafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eea8e6720c146cd8b2f62e1bb9b276ca1f79bc1026ff43188d7c0b6182248c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ntda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fbc06ed58c7cb2cb0907c6c6803b3423b9ecec3a52b64a09fd2124728b9637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/vefgy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409d6f936c1ea1ca70cc49e1362de3749e33a31a29bda77f62b6704f5bfb5da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403dc22d786c497c651e2f6316f0bab2aedce156a3fc1b4b6c66bfbdd34bd04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogof-dufiot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef83a178058c679d8c67c72c9533a6475a7a36b944702ad49a8598aca473b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bda63db49efe3a6763560ca6894dedcf027825072ea08388c3380b6f88b7a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyilud-vamuikuabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13277b55284b91dc994327471bbc8baeaecbcecd01f25ad28f974645819e537f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gfobai-jigugamafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a2fbf82305887041898866fab8dc3ccef543e6a048809bebb9755798800c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e2079d6201e8356a4f88cca2a80b79cf34dffdfb05f39a6cab4b9fcbbbeb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...