MAL-2025-153400 Malicious code in avminh-afgais-fafdosafiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d96bac10b49d3ee888d6683bf3aa5cbde5c9dd083aa7470562cecbac510aedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157501 Malicious code in kentung-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da866c3e5b78398be6a453e8a175dbb76d394223a64c4fcb8e464e8a863e5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e7381843e596a405cf06f91d2e2fb0a8ecd8588a45672fe0a72b10603d75c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-goma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1458cbc49ab677fa27c5b4f68b019a827a3712aa3ca2f4c3c2a4cd873bc026ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96869e83e9438fd35d178d8eb5f0f51467d3ae4fcce7432a35035b4daf27021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154836 Malicious code in fadila-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b07785b617367d056f57f5a493b85d6e4a083e52b70be71edf9e49bfe6f085d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/slav-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e68208d9dc0f49ff6edc9c9a0c016f86a4609209d6a5359a72244decda9e187c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d64b75968bf32492fb9594af5d32be9471f0ffed9c953f6ba7ac7255097437a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5118b2f0a19fc81343921ad7a7e655fe20ce3de24224ed65bb39885f0fc0f064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhadafussfufi-nyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90fc41b80cd279e7046f0a5ae38a68d16e08851c52b37744aa09dc10f43a35a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defdced9386d2c9b85d911ded727103cee918b553c45500871f879d06e2c0617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085e5dd25901c1c3a49bd22adaa2420e30afae5386a1f08f81b3cb95392b7714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8c7fa4ba2aa8e02f54fdf0eb338d928bff7f489cb4ee5978ffa5190a2c6412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9563cabfa83ec97c147259ddafb3dc8e5443df566222c6bbf58a464f8c0c9c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puteri-mintau-p (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9706a0c8cf2f438fdaa4f993a77d34008821ba456778e4c2ffe9470ace2b0a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e45bbfbe514e13899b0caee53a428a613c3524ef86d02bcd2345f35a50eaeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153696 Malicious code in billa-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f96935730bc902fd387931e96e05c834eded9682a0d74e8baec294c2cf58a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170486 Malicious code in verify-taic-malu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0155fb1d38f178b41c319c645e0e5b4340e259df4c1609778f5d1395a66234d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163986 Malicious code in parwo-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0e2ffb7baf3e9ee56610ee5485191324600058d982d0b0b159eacaa6a42bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150734 Malicious code in @miptaa02/ikadasao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535a293c320995bafa9140f8150743ad2aea12856d25d883b82c2f6cf3c1b18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...