MAL-2025-156086 Malicious code in ifarfai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29a9ca3ede4ef2771002fcf9e7289997a120fa869ff99684862c9548f1d38fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164790 Malicious code in rinto-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4aa2f0f0c08bc7080162f0348d6bd725922d1a01c77a491688d54fe9055b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167701 Malicious code in teagood-namakai46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4aee81fa3c0feb6980d84d92512649ab3df8a783a49294dbc1b718a01294b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166101 Malicious code in slamet-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7497b7b4731adf26ab8d4297fdf4727fa5e9b73808ea3319fb904d609f9069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157606 Malicious code in keyla-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f68004e30c7c695a6e122a44c2dd4cae04548606f283f30851979180e01caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167131 Malicious code in teagood-manaki63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f27e67bc4f617180e5e61b9a4fb71dee6e0683a2e8c333e31ae6596edf21d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demdadf-nuaio-adudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4138088002e645d841777c757e37f161c34f4802a645a6c28084a496aaf46484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aigoa-iau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9acf47e729b95d446b3c9da984fec359a886ba73e85b2ff80f93c1b848ada49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/miasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045904585d2da9c118a652a5b3eaaff12232d5485036441291887f7886a6a48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubalauvalio-ilualu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb5cbfc5621e243326564fa02860ed61938b0fdb5ae1d22f1f6eade2cfd87f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ed1c8316b68e72aa26895c6201cbae3e15557c236cc97651c4410d32138d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-nakio-upsidaaiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c52128295a37fc5e207b93b0ce4e2007d36069aa9a93896b728b5daa1434ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-n-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e3ab4d7b2a9cb8f5025fbc79e1c9d2658f22610b39e5397652d372ea7ddbd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162846 Malicious code in nokire-lokcek88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f06454e5651feacef0d7d3ee29997094edfc6673fd13442f066656553829e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160388 Malicious code in messi-urfait-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6416f099947270d1a54611600cdfb389556cdee7ade4fc5ad70ca78630aec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163508 Malicious code in nokire-zabuza20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2edcd612ede454f9843c6717b527eebbd34a4e4fbacade9958176333f03829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8908d912937b35a7b5a7add43fc9756f4878d1c65747576f8190d795c4d2d5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a6b7535e78002ba2b791033ff294dd6d120d115d7a36ce7a2b40603d3c489c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3595b082d2f5f1a3e02cb67e18fcc4994dbbb8290e73adc4281786d07d3ec769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otginaaf-dofpjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3181ad6208e48fa97db7ce514d47ef5d35818f8fc68f9da0058592a1c4407507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...