MAL-2025-156035 Malicious code in icha-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f42a8d648de7cad4bb212de5885b06877eef270b486da30a65f7ff1b41a5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156412 Malicious code in inal-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad669b6085a79e1ff2f9920d09cd7a0177fc3ce85c7f218ae13814f8e50a4848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-tuw-tauas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822bd43f765965110bede682de0560a244d42f79ee913f878ce19a2da83c247a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sdda-midadarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d4bce12c18b51986d96c7addf4a4d2d461bffb2b9e0f35c8481197f6ebc450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimoaigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b37634e45ff2d75e7ab2cb02585cb6ba524e07f15ca75cbacea94760de48e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-ala-maoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a28e68b65478309352da62c9442bd92a7cf18e3d33a24883b9e436e5685e51c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/eriu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d40e483e962df7d89a6aefb16d193066298291c526c8bff037a123683201f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ersius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d350cd1c2ee9a681699b10cc081b237f70b2d131f1370281fd586cde108ff557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/upjusr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0821b2c018d2c24ddccbcac9bc174ffebee9d4a22d5878dd55564332391b920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iagf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 712c5ff264be4f3ea1cbbcfdacb6b5cdb7f275828e5cb441bd597bd666ba8877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/nyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a9827e9709f4403fb6cc46ae29c538de2030fcad5f51d1f7c6ea0cfb00f515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sxhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4372c71d31910339b01b69cc668f7930ca0a4b97334dd2365fffd36d3ca904d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sxj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21275df9f55575cb5e9c72882e1bb2b0f7df5bfbab741af0ad092e26d586778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa436b37cd00ecf8a1f3c427f40600f28ced17dda0b2d4dc8787989460f648c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70feda5d9660e703be4b7f1c730a82a827f79ce09ea8d637d465469d634d3b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abi-alaufi-ayavauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea28c341c2f5d406c4238b693df8660a0ecad0289b031852ab13263cd311282e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-aviun-abupmavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2a99b98e4ea771bc07df641fdce337e00a58b4d2698203026433b9fec6d66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abibua-moban-atayamuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42ec3991fa113f7f728c62b868b653e781493ab946c202b41f6dbaee755cf93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5d09bb786a71e977732670c8374a606032301faaab45ac743ec604dcc06f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciydua-idusust-daru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05f7fc93e46140ac77c1ce9e76a5739000de902f07cdaf10bdbc55aef5a72dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...