MAL-2025-155296 Malicious code in gifa-ota-uofigapffuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d65df92dbdb14ffc3355380146b1b93ba86ac360c56a0ed5b9c92a81edc364d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157595 Malicious code in keyla-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da1ee1efd3f07f4b55aeb23b12c9ce56de676d4bd86c2f77b0d0d4761d88fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161797 Malicious code in namae-nadugsua-midtoskia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac8a556f64c06c764287b047c4573d16ed3a4eca7ee5f70b7bed00cfdffadd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167479 Malicious code in teagood-nalikami76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e143bdfe26b8aa33d8e3bbe91328edde7ece8b45daa6a498f18d2fcd4a3f44d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152392 Malicious code in alita-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94717d8c87de1c545aa8e50a2873f6e837c4a143b31076d32d167b83aa22a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167801 Malicious code in teagood-sukuna47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0d35076ac7bcad8a0e3f651ddf2fea4c234aa70577c3c4fffd071bd241b56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161602 Malicious code in nabuf-otoimban-iagafio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5c9341729110180b4f95166cd103bdcfc6b78febd07a1dd7155958425f345c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/vibas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 736808fa2783dd91190069564969787ccf688246f619e54b08e637283af7b0d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhoupaia-jasatyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478ce697d131189faddc7503cbee91c4fd1010c8b04d4fc24352d9b52ff1f4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc32ce2aefd00701c1761bbc44b2a1716339c7b8b869da9f977c0d7000c10ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tsfdaa-ta14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7616941589122a1dd5ef798cfe408fe76e5d6cda257524522f53ad59fc6964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safifda-munari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c1336a92cef831b978e2a49a2b462c80074ff66f86efcfab01e4a980d933cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b257c1f2fb243a2afb4725e36d6cc2cc5ae9eae1d9105d565eb8fb35321f3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analsia-akifai-asuluia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7a384a9f95f383790b95338d944a1ab46176fd6796e5f48fc6d61e6523d500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/slv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571041fae47cb37a94f3b38228a76e1e6a9b3e46ffd0b2074b00334dd5bb5453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d37ac08e129c9b44df8a3de1b2cd340dada43158334be6c56f67f3c3b6c8d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutsai-aadsaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93bc9b56ba4de2191594586054a8f201647533377e5f001b0ad00b650311ddd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-namuda-miopd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ae08edf8521a183bb24f1d063e360a3c8f786c77ab0854695e469ee9800787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8abb09d3373fba90bab70d3a8776d3a47d5c5a25607317473bcb1d8cea98fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuroichi12-scene-early (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e379f725a759172d6d96035afd570867815da66db7edc8a2108acaa57f661420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...