MAL-2025-156109 Malicious code in ilal-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987e35322a02049e2aa88cebcff4e87e2107b14c4f22b9888dcf792d8a4a6999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160521 Malicious code in miracle-dok-ujauik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5d150ecaabd2149f6b3e1e6a38088db22f1fd840b824e9f28cb97a4b504c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155513 Malicious code in gurs-kali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11cc95416882012d632c87f3d76d7aa7e87eea311a24ae600c95428b542db3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgfiagno-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffac5e79478d06454b6133c512c20920bcfe74b467e36cca7e818aa78370c391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd99421cf444afeab88a155285680bc2c3d4943523c1565278b47e51682e63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/taisp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487f0052fbfd05b7b39e4ebad96403f5bea973cc7b6d69ee6b4f317d539b008b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5a257bc1ae0ae858141708c6416b60e3c7ff7168a38a0ee6bc0d04e64e2d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26aeae99b37fffd4839851c725a48414d92335588bb418fde6c953791598d501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaiasor-didadafra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da9f258d72d09e01bd50794ae78fb6518d8e2b704cf883c6f9872b48e451af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirane-asaiggfaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a7a55a3f2040263be656d02dc5829d5e080ecdf3468e2ec72d9eb501b694bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vakamnanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5164ee7b6276679fbe74c397b9d2cfce5088d4a2cd83a4a2c83265490ba6ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61cfeaa8f317cff793547c388713b40fda37fc94a4cb2f139ec43a67d745a371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c0f7c4adc7a81497caede62ea6138e46cf2eff0f7a86c4a250c8fed3bc1243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d1a2cc928fc736fd0e73d0d4bc23e56ba25225a223de4fa4aa5688bce08350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-grandama-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9faf36be34db9808eb7a5be3d5619ce865785b921240df6cf92fc72520a4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimmn-affsga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376811b1e5d97095d453603f03bfa6e22b19418efc1f2ab09193e7639f589d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-sf-asfh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2718c2803b97218eee4397d9cd441bf31cd83d7a8304ee52a6223d1d9b4649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20ba1bb04283e6bf9830e4d18dd3e98384c83d621f2db5b420700a20c75a916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir149 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b125ddc1c8ae5a7507fd0b75020c384c78a3b86427fb23bc7690b35179403019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591673ca1f9407e9886bd4da378721fbfd8ba7019e76562f019b15b1fab19186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...