MAL-2025-159409 Malicious code in manadsi-sdada-mivafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2ce8e0faae5861e6f62c6dd7e094d9fc278c60d8209af1e908ae5c8d0b69be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152356 Malicious code in alita-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d23e87cfccc188d933fe25aebbfa9c1a18f4e7a9fcb0ef2ee2a5b881eabddfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165618 Malicious code in saku-aiaku-unusiakau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e33471080bed336abf474653af974b464fdec04c2fe79ff00018adc6763970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164535 Malicious code in prayoga-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344ab54a7fa8a7deb1be172c7ffa2b70cb378649e722a95cfef04afce52c0f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153383 Malicious code in avminh-afais-fogbagiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c6effd2fae70457af83c954e42171e2d2efb97c187101125d04d541a6b0794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156926 Malicious code in ita-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fa0d20bc25360f79e92f72fbe114e35133bf7936bdae6c4180d136f6bbb2cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166810 Malicious code in teagood-cuekin44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3857960a7b5e4e13601965b288e1216f784c37511274584763c29ac6f2c145f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4da0e380ee08f570b8c8448442c68e759df7414e04f1bc20053e240b323d489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/faeg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888b4b3d1e474c949f45d7e7fb83c79337b8d0e56cd9535106ddbae71f5a6ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676b84a3c5de5776cef17929f377ae51178283630ad186650d7f92f1cd7b6e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idusut-dajr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5856fc2f9617d380ddac2c0e4f7c1b3f8121d8527cd0d332fd56af5afb88a983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molpe-asimsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd64539174bb2d5f38a816bc6447eab2c2003ca005b0ccc3592cfda9f11760f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimn-g0afigaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c54d804010821462c60a09fe3691e23e3f64a2f2e39c9b698ac3d2b8063818b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avh-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63bcbeb5eeac2a16e068b0de60de526fe8e3454784143027d41493cf0da8c0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modira-fuhopia-janadurai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db167abcf6bfcc39c9a33fa02b1f2cb32dea1c0633898dcf9871e2468e3fab3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in turisna-reff-derfueaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb6af53bec2ab9ff95286fa12143664b387386a82064ace16097ac65ea3c3ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397d52ee35ff748e3ba0a2f99213ab7f3cd102320c6fa7f6e1f7812f26399948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-intfsi-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ddacfa304dbe818fce49e39f43e5c449960ce72d871f585a36b1dfe7ab3796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyau-tuyagdat-datut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2aeafaf91533e22542c10c56822e832131cd226752e01febe95257f41db0154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadashi-tssu-renew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6818a8a99356bd1c1cf31a80787547b40ec89346fb2f08ccc41c38eb28f61294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...