MAL-2025-153582 Malicious code in avomainah-frauu-ofafq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3f4c27acf462e250c70a1df48a9bdb72e65ec4338b54c4f2f9bbf0f22210c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153744 Malicious code in billa-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7519d32e01563891863bfbe2737531af796010435515a408d467c660380f66e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152619 Malicious code in anak-jalanan-mdn5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a53d4b640531d32f054c1f9cefa4b4de3685927f902c7435cde62695c063687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151726 Malicious code in aciyua-idat-doauuufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e53d5845f18cfb72156619ef2103f96ce8a94d1e075f3aaf97880cdf0b7261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158040 Malicious code in layla-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395d61c5693975779df44414092116715e65f9772751ffddc83074808b6d17f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166466 Malicious code in sunderlan-uylud-vamknin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1aea3cf87f926e72ad7f960de6d4c730c23d0a2f4a5d5ede33b4a6ca612a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154185 Malicious code in dajouka-sdfaa-sa3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18677e8794f2af07d5d33cdf904a1b521c5f792ea283447ea3c03978e130f056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162734 Malicious code in nokire-kore45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dbdcb24cd6a9cca1445c4a1c63bd0cb7cceb9f0c0a5318d7694faa277360a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-misika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a38d01cc0a98403148f2a1bb12d842e52ba441d69c1c35bd0d9beb38258ab22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c78c8308073e1f4930dfe085810f350c81465af1fb5ae270585a38fcd279ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moilpe-arasuiogo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ec08f43ec4fe40a1d515f6b90e7479908bcf5155ab549e4053b9eef0584b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de603f215254f5ad2a88768ae2601b6e4c9c7b5408dbafca42d1e359ad709ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimoaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d253d7d2fd147ebed8e00465054189cea4f6990f80679cfc76a41d4cfa626c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f80302c927ab9024ff8efd30dd812d7b35351ad835a30ad1a5cf90d1ac8e365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95e71eac89bcf98b21f9b810893adc107960310f579738930967974dc3a2397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6451cf979834e9ae00cb79cdf882f6f730b3431b7475ef37a18c53fc1f811f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapai-safoa0amaa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f3f73c4442762e66b7870f5c29f4ce415166a58510ad78062ca960bf6ce81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6428ff50241bdf19566e94fb5b6cf02101f812499737d6be0e797ecfc7300b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wasdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc36d05097165f1caf0c7f28bc9e3ddc31f6247830bbf2ba035f2a901fc7aa34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18948de17f1f876901fdfb86a49e46dac5419c35a521749eba2b6610a41d51e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...