MAL-2025-151499 Malicious code in abiuna-mobi-amuasubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b12a45cddb612d944b13842edd60af6a438a8c83fa3902a0cbd169d09466969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162348 Malicious code in nokire-arhani36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1fbd4807c612ee05db7d9f4f125b74392af9570f106a3ba6eb2072619967c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162765 Malicious code in nokire-lokcek13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176c9a648e109faeab535b4a8736ef248fcc1743435e5316519871a1d6bd0c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165665 Malicious code in saku-aku-idusanun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013aa3bff8945786785c0cd8bf00b954e691470670b3ebd81f97d4c963a186c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166614 Malicious code in syahmuda-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd09e4c3e2b5984bd465f9292d18261276285bc3289e4438a1bbb0bdee83049b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09291a8b5ac51d5820bd33c300e9a0718ad24f9ad283359abeb4d7c694d99d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-sa1sa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6c972dd560589a03209dbb562fbcb5a195ba83e08e34ee3c7061971020c657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ad-ajfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ecdfce91af87f13c99ca475201bf32cca8be1bbc2813af9be5b938b25e99e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedad6e94ac091c96cb7f0daa2138b44031222681f318bdedcefbd861b63e939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuvali-nalaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d474f952af1594bac549ad07515b2fceecf3470c6aa71b41795d8cbeba22aabf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tsfdaa-t6a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86af3bcec1d9300a8670d021916c495b8f67b4a986a2b91e325b0673fc449d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a305256ce9481b5cd22ff0a2f328bd87bb7187800d416fcb35d2c9d924c8a2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli155 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd231e16f1d9f6d76f887e73849f8e43f38b15b468fafdf9818cf0c9087fc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gasasd-9sas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2afdfa52029f09bb6795bba6fd5051c752d00c518eee787260a86fd11f6a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82272626002e9bbb9b12f46958a468e9f1a2790a697120c444cd42a45b5e1658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobiple- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c823e8d2bf497fd047436257251b061f9f0c8e640267cea385c479474b3752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in man-nonatai-agami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f30cd02920b034257f693df1230ae45db72f35dfcb2816e7465f8f4512cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe6f43684f0d8969f6d2f1092b8e9e2fc3b719f7ca1e9263b1a920cfcc54e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-muni-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f940cf79e56e3ee6a93ca26e5fa693d204cc218abcbe3fe32806eb667ade3b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164974 Malicious code in rita-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1113ff87d8b246375c2f26bfcfebba0ebf286eccf6b65bebf895141e13c181d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...