MAL-2025-175238 Malicious code in kapvino-socvni-fafvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189c57737afe00c6ab925bac31f1dccd80a09c6c9757186491bdaaf9f321b70b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178650 Malicious code in sayyya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53eda4a1611e4afa5c4eb7b3ca7144067a91f234dae3cfe98deb408cc1355488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guide-maivla-ubntayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab88b686a9ca956a964593972ab7ffd57b0af077cf9065e75741ead9f031257c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amjadnoor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f88654d4b3ad04e640118d83fd619b9491b80340ee880c68fc3851c6d34cb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171711 Malicious code in padraigkelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffda541fb43375b54ad613d2bb62b2eb6de351a84a5b78c007f3de1a29bea8f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171569 Malicious code in miaclark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887d2cdccd6d06f33f574965c0cc10a5c4ba7fa77dc62fddc32f586d92d212d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gobagilai-januqigaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fe015da928579d9e628c4e58eba56a3a2856b86adbebeb35d2303188bd9ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019ed60f66979b1179cf5d8883ecd629cc2eca700e81b75da3636303aa2a7424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-nai-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3f7b5e20e1d407b069bd01821695d99d11f258626b124c5259409eb3c63a16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cfdf38deae25bfce21b6fd71d26e44b516c3468190c10cb15a824974fc70d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03e993367dfe530b2874b5df44687afa445850769c4fe6b4f8bd8787ad9258c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951346460e5d7680a91c182f9b7d3d13c0823c6a244ceb8cb6157fadc23de718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manta-naya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ac575dcc60463042af0409ca9d51fbcef59dd669aede21414c7db8ca400219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788075d1713e7477efff56c8934082988eacdf38e09a8238bc40535da2772b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f894c4184a62b44e74f2695274aaa71dca07dd6f56d0e42592e51b8bfc8b2b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165618 Malicious code in saku-aiaku-unusiakau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e33471080bed336abf474653af974b464fdec04c2fe79ff00018adc6763970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169277 Malicious code in trevora-cir79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb973e29124f14aa0e962fe58b63f36d29731b6e1c15e75e3e4ba1de84ebe5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164318 Malicious code in pitra-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1de1055b35e214730563e2ecf6bf273587ccec04d3e6039c08410a5bc83347d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150945 Malicious code in @miptaa02/sfggghj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e301fe11876b3ce48fdd141a1a3a05ff211284ad76b094a08f482e8eb232c175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165500 Malicious code in sabubaali-nalii-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715d0fb62eee38010d99dac90229fa10be9530dd9d56b647f9b29f0c286d9aa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...