MAL-2025-171713 Malicious code in pagi-chief (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068da2729955f81196162b27348a9e97c134cee022f20dfbb04534d433db3db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171054 Malicious code in cometobserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570b79c8e800013aa7b525f860206de1b4134ffbbf91e03ca2f85669f14f9915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171495 Malicious code in lexiokan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef385ec441086a5d8128a2f5dfff48b1fb4945490c275e244d2f00453ad4a98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170764 Malicious code in akifhaider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b4d458a99843c1e030c50b1640c6aa3f64db7eb0158c0652a7f3a1b5d073afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171716 Malicious code in paulocosta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc89ffabc253abce5b383433fd6d61a366f90477a4796100b6cbff2e2c57d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171701 Malicious code in orlaflynn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d6955a5b48728f4e3575138ffe3da03fb1a0d875a2825b6eab6b14deac0356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee69a64086d8733653dc9569d2e6bfbf0779033482997b5a9aa43687aa85e768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-araonbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e175a7d597475d4c55242384ea674cb2f6fab362a5ac34d193b5c4ace5e7dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153994 Malicious code in butrui-muiko-muyiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58655330220bdbf495c51b1c28efcad450cafb19f8a9cf24d407baa772c06aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155638 Malicious code in hafiz-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa2b4c012e616ef6fda720aa266b963340bcc9120e65dfdac75ca6583f2184d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150133 Malicious code in @mipta1/miftahrepo19repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9f522be329fba94d87d3ca5bee8c71211363da535b99030bde29cfc7df6c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153512 Malicious code in avomainah-fragis-ogudfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094c08233eb0f2825a6c3fc47e90d7ae5e8a81104bb38609fdce02be3c1be9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153408 Malicious code in avminh-afgais-fodafahog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0b630b45155dd3919aa0bda140d6233137a4afd6b181a8f4e874613dd5b2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150609 Malicious code in @miptaa02/falak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de7630c2b5cc60ddc1e511bdc8214a4222fc13bbc67405092816785a9700b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159784 Malicious code in mansila-tdhfla-magai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d12cfb5846a0e69211a219c1a5f3842ae0bd320cbd79f7e88135c221623e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153929 Malicious code in bufpani-mau-naayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fd7883394dd2fa5065403b80d724d948fed149496764fe6a83b349918ad8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153656 Malicious code in billa-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87884553c12cff353be878899d93e9d82a22ceb1c8f0090c9519644a36df89f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-unianusiakpmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4367517dce045cd2bc001c1c8af37c1b3c9ff2d73108541fad7cf2da15e6fe63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-yuki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d5b8249276827d9956620f96cca2d7f95d5c5de7dbfb10f180a838aef055c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tifjfx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507963ab6ec770480c0aaff477f59c6f3b39ec7c0fe33f3e8ac2d7b82357799b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...