MAL-2025-164407 Malicious code in polymedarnan-nut-bantadl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a55c41ac5ac19249d235d8a5357e8c25cbe2185250f8962bf623b0f4e4c18be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151913 Malicious code in aibona-mobiule-aruio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e632fec6a2d168ef5510c92694ffe31acc1d07d194f56732974be84304e018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152415 Malicious code in alvino-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e381a65f313a11d1f5947e298ea8fe51f7f232de39bbedd9b243f28706514369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165418 Malicious code in sabua-muuyfafu-daufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a645a78b67fa4876006066adde83b28f17a472cd35761441ba9d595fc624ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169488 Malicious code in uaragia-mudifafa-sayugauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5024220896ede674d7d82dd38f7c5149d6107d6aa9fbfc692f20f642e766e30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746fd1eb90d32ba4b85ebc35161cc721d9828710482a14cb4cfbd7653bc8eead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168492 Malicious code in tealove-nice15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14440727387e5f1f6307159ff786ed181e3ae53d17d37565bb0e3893d6649894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169457 Malicious code in uafaru-musafi-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b06f7893defa3362572ba76794432925d17586d5bd953395537fa8d4438ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150235 Malicious code in @mipta1/sfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9015dd145c0e5984e60d45838f54a03ed61750e4279cc89b91df76900c834c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170515 Malicious code in verify-ticaul-bisuaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c457073b746fcfb8ab2d562c1e811e21c63f686d9d663d182c4827ba70212a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157874 Malicious code in kupai-lukonta-igavufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8daf8de9d5cd4e6ad342ce9dd5d354787db3fca92296c493ebf87ea30964e5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164128 Malicious code in pilka-kalima-biucb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bad5c4994b760d21df280a0a16280a64dff45335b765eea750b666ef7a4dc603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluvaika-kaiuabulibu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800e87cbdb51eae33c12061df8842e37e72f87416ff5a934ab22bf7896ada36f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc8b1aa723507eabded2ec5889e74c1b234b656ea973b1f55927e682a9dc04d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nusdtafr-msiuyu-masta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9a78f8d3398684ef8ccf4206145902238a55a5d88dae9841a9194b0dc0763b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-namuda-bakaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0db8b8ce6b9fc76c544915632bab6991816b31bc2f0d5c9f323ada9f373a4f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fsdjhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dc4988bb85a36b344cb6408839239661140bc573b979066222964a08a76693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poli-akilu-alubbnina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601fbe92d28eb39f966e042f849a6b27affce0c385acd7d2a5973d18917f2b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demdadf-sadudar-muaifopaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff6415eae915a8b8acd3cd398f012ec55d27b27c8f9eb4b23571fe98a784b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-udk-vakumakuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b94744532e1e00c32ebeaa5abd417f6be85efafadf952b8c821b17443db90153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...