MAL-2025-152497 Malicious code in alvira-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7c0366776dfd45367ad7d710510e7c175cbcb5ef55babddca83a6120255be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159909 Malicious code in mansioda-nodana-munfungu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e1cb1c6b6b87f6d27910b102d2866b56d593e2ece3ab8152213b7a3f5b9964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161138 Malicious code in mutdaufs-nabuta-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34445343b2a1a259f5d7369872514562d1a3ae8eed22389a9f8cc4f223851f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04b3835a1413f75b070c182787d2acda7b121d218f5a85a385e3185f21c62c6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b5e6ba06f3cdfe87d6ca8b9c478faf32b7c35fe444ea9162b7df9ea54e956d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9986c204bd186497a731c3ac6bc00b1e2817c12f64ddd52f78032624b9cfa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/deff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545cf3eb502e42c29e96ac1c78a3dda2563e66132319a0684d0e797840fd1655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0704c3ce0efc32ccf72cf5ae688237f7e13819a40dffbbc329ff6deb619df91a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d622aa7188d73f8473817d297325ed2392eea82ea806bbb241d07b2f49159d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d18892b3a203bcf7ad7bcc3c0a3f2b0ed0d13b90bad6abe117568f3be4a1d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kasito-minori (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d3ef68a0730e5f99bdf31e0d0e15dc78d95ef806c7a6c0aba6ddd43ad2942a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkumi-kunamlb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4828f3bbb5a1928523e2273ce56d977107027779972e174009ae72f6b8a5446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61cfeaa8f317cff793547c388713b40fda37fc94a4cb2f139ec43a67d745a371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161660 Malicious code in nabuf-otomabin-nojsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9225365a6be6e830df77b7099fee11347a8060536033ef3a3018805a67231196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojausggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7587c529ad59d87468cf93154afc828dffdd97cdf2d8d54cc158eb3e2348bdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b820e787618fd2d3d956bc79c469aef8ea306f4c93597577e23ef27bceaa53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demaf-byturaa-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989123ce63020863eab15170470b7b4f543e3fd6b3b64d1bc81b43cbd6ba7de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36f97c09365306db2571e6c4cddf15af60b4a41cb4a6f378d9d696a19776461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6b527fb73443f16161b7481900aae55372d8d4ed1e111d88fb5daa28b00437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367e275852449f7f3f1764982f640c290145e4bcda078ceeece78c877028fe9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...