MAL-2025-161552 Malicious code in nabuf-otmbin-nuyaagfgad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6cde77c1349f2b7277570b6ec13536be0fa348644fee09866d640bb01911f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160791 Malicious code in muda-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0c02b3d00cddde0ef057810e13c8cf88fbae28ef0c47d6a4d38d6ff6fb4d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150650 Malicious code in @miptaa02/fih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87dfc77cda7b37c400d96d6c4d64c771dd41ae38082f1c8a6311fcaf6e6f87b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansida-nomfmadi-munaigaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b258b7833907bfa9369353cabb5cda1ab8ad8edc563f826236b6d22508f3ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304925fe90d69d1e51c6144e55a1c0a9dcab16f95076f6b527d6dd279cd68298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-alifi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464ea19b5d84eb0c0b6c0fea4bbbb03f52c4fe6b5c45e041de6eaa5806f945ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d57d0081a22d3ed968be5a787f4f1ec2ee8cb971655d3110e452c4d4dd58c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2493d44d40022d63985f7ebb53b16b8093fca68719adde59aa5bdba3ba2b4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokigragne-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f0a98ce55f7a5e0476f2bee8aa563b38de0587815579e34a3ad7f2ad3176c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13cdd3784ef6be80436f75b596ec9a11484d3c5bf74285d32489cbe279bd979d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf40dc6a63e877c97edf56f5663c9adc12d27ff0c685b80fd838c67b9d37cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/paso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3eaa2fb890fcfadd69a09dd2cde3ee9768c1122ed99a7fd190c971acc071fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avbai-aub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33887bd8d11ee982683562d6d7c7acfee18617a0816ccc40bd33cfc4cf0ae465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f335ad573f78c77071d6558157344712ff252ab9ff436f3a05c79a3d84dae235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6287610bb2197273311326c2d681c944c2ea76fbf15f0eebeec07c9bd5ad2615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afaais-fifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91e9fc414ab2065cab9366f5add0ce960145b8f85a22c6c6b94a18db8440b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afai-foog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5275b6f73c9507d473e9e02326121e19a93338604cb637d7bb509310d1006483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b826ac53185e6b712a0b3585d3f25a8d6c92e4936ddcf2e0fe7c37b485c51da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ace05da76ee6137520277d1359ec38173497c04ac97a43a38e1e69b06e0c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-govama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84368b5371825aac8b3300929191da7ecdb4472b2fbf3c20a7a4d7181e118ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...