MAL-2025-159178 Malicious code in makan-aiga-fiufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490f8c3a2e7ab2e7c08d73b264d1ba093d0d8ea08aec97119578012192926f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162450 Malicious code in nokire-arjuna38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0dff3a4399dbf5c4b89bb56c3942fc718de95c9fe6d5cd98a405ce358a6464c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168349 Malicious code in tealove-lady41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a23db394acaf2edb830ce973a27065f0b47f994267db095cae1d1a1e3b32a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158078 Malicious code in layla-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41da46082f5805d04c6e714f63158627c48d3f21e135feb960c0a28997f3e840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264f8a5978a7ee55d9091e1b917bc0d76e71f055a618312a1555e3b0efb00c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytdut-dafana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90317c2983aa8763493c337377ee49680b21899d189fdfb85b29f5a19a07b42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polialozin-aikuki-aliuanai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064db253ccd4b9812dac8ec274cd96dc6c4ceb3a55567cf336769a091b3bcfd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 589957c0b687fea40bab62d6652c24552314d788d49a22c71ef97eeb2450ab25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a80f9aea42d0c71851b033d277518942d8855f244f3529d8c513cb8bc61778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ijc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e62912b9c68b933e52bede732bc5ef8f8063204d3fa4650c066676dfa37b4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8732e27dbb762fcda03d7804938548cda64fec1be2e6c253403618f70586194f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgaf-doigoafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a406f901eab9787998e3c233812f0d1e4e0a1589449b61189b17929c2a10d280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhay-nyaiauanfamatua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e116b035ecd42a6c7e787422238715d264098fb156d9714f255cc7b73095c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bbe50f677409572b8fc314440d7a46dfe4c9a521521997e8038b624aaed1377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e81db8634f71116ca486b53ae662de09fdb1761eea9a41d169e2a5fcebfb635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642de07dac424184be3333b4eb486fff6b8e3cb3e1cffa9af839ac710e0ab217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335ce03087d074533d6389fb4b516b555e8e0bdb555442a332466946dba62589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd4829f19a6085265cac95fd221ecbdb6ecf716d7dcbc71f01bac43a0859b64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mifj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e51150e7aad8babf3b625610a5a1c72822a08ea102495a3d5f9757ee80f90c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-nakufam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8885d2156ff65aad2dba3ec9f906f2e8c9af378e37c628702681c82d4509b0fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...