MAL-2025-169039 Malicious code in tehah-nutay-ko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256df9b9c7da58e8b2c1f9a9cae09f2f176b88c7c837514d8cba2410abc2584a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150604 Malicious code in @miptaa02/fabg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb9b4d9cd8a65730c7279dffd47441a4b346e36491554593926af84d94e1ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158043 Malicious code in layla-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 107ccba67c7e34b96a683cc3d46385b5a337ff699249c042b0e68ff5541df8b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155515 Malicious code in gurs-manci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1dc4465b4cc792b4abc28cb5706699b3644cfb1b2a0edc8adaf5f18ff26f042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167775 Malicious code in teagood-sukuna22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420155541696d520646244929f57a5c2672c09d82c85afb09c2c1a6393e586b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160205 Malicious code in masiolan-of-doto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8832dc5b2010b0fe909948735878280f8cb6f33d50d757369dd81940b87b0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150245 Malicious code in @mipta1/sissuspf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fa1147c22ecbefcc8d9672ff2c24395864a9211097a5c4e360713da4c90b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarug-miuafi-sut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f651c32845468b00a6d96e85894c8395f6319bb958e7b63b9546e50445cb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5bbd644d2cf2fcb5f4c69bf9ee2db98878315da9f963fa555e49d835a0c5255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mqhg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca38583daa1baf5164468b9b342771b047ad6f71ce8c352053412de8d931fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-doauufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7490ea91715cba6ec1df08f067929bd0c694d4f488f9e74ad485eb7d50e8cb0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove1111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61049b204b59d1ddb3a597e9e0ba48277161b5419a1406404c6348421e4213d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-matdu-masn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32f31c39c3b6be5e87834dd3542c35cf4fa0239997a330f363b6cc4626bb2974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30dc78423779fb7b357e40f6384126ec2cd311d11e1c84332cef926e4b9858ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ef5d84e7bed390c5101a890e0769575066abbd0fc1b3cc594f70b89c6f9993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scisor-rmana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005bbda55e07a25e7a5caddd48489da7e4ec5f9a6ecd26ac28983b0c1baf7c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2196e8e14ec3def4e9234ccb43f62ef3450dbbb4c3436bd98fc062a496ae43af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d634d2375d102d96b8a989e2f3ae451cf0be3eba9ef1738b1a4d096abf2e9d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nutafday-kob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82369d6bbc04645650f153877cabe29ba47cb85bd7ef25f155b0c399cd09d0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-sdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943b6d40506e148c1ee725cdd140a5a69e37f528dd5bbf6546dd2ed09242c079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...