MAL-2025-150994 Malicious code in @miptaa02/uufp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd134fb91f8ae30e9a2798f056fc39c7b6572284c115bf5b71faad8498fba2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164586 Malicious code in putri-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17190d07a37bae36fadd3ce0a2ded6d375f2e1098b4c92109ee12e81215e01ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158915 Malicious code in lookingan-namalaka98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6759c9b0fe0f37d3e11f2585077e760426097fa440e17708d3a3e44bfcbc3868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9a7d18f046be62f54398aa4e29c6faa2653c3322d03eeb09b8809e0c47fe88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ridce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc08404422d25feba1e64505e6dc534d24048518240529ec7e8548689c066c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jiugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78dff1240bac7837c91f4a47f940fa2f5df02b8ab3a3c4e827c02ea0f6501b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cff505d2ff7ced48c3e94e6a6a667b2bdfe7988973649b60f65b0d02c60a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3412c31f38eb3f46261b1165f6c7b01c31fc18e4f743bb689380f483d58bdb64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5689fa46f0703b80a321e206b09eddd6519c1eaebe49beaae6b8e156b1034f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afisgagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb0bb6e17f7dca1eaa5676137aba2546c63433d63f3fdd262021efd4d2850b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4ad276c5dd4720a6e62afae524993bf8a1bacaeef2106dc605587704ccad4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4490ba440d4bbe8b9a12addbd87350faac1644b16e7e322482c12bfc04d702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-amoba-iufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454ccb4a0935b1eff19235ba0675a7c4831d6121c104bc632277b05f5cf762e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03952b5403c99b794fe4a9c92ccce3cbfc09812ef05a233bda94c3b3142d9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9221ab3a08750d69d25a4f290f47c76fc10ef5d9028b091a0078a297f9c24fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553e406656668b3d56963a0e635939d077ad64494f74a5f0854d79962fb8405c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd726e9c3af490c3a28a890c174032c95aa3f61e1ed5a728559998a2a3a1f915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cara-reti-ajsausnsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9920cc8b3e14929c9172f29e323fb87100dd4184231e054fcae9281a9cf983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiaala-magoaklani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2c3d6057ff48eb14e42ecc744c4b04d692350725d8fb20cea64bd70107d6d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07014c2851dccb40940d706d274e4f9012d7daa382856bee88cf59d0788da348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...