MAL-2025-160623 Malicious code in modirai-fuhoupaia-jasatyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478ce697d131189faddc7503cbee91c4fd1010c8b04d4fc24352d9b52ff1f4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152001 Malicious code in air-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79bdf3d9f200642ee404437512065b3b3f0b9fd4b39598105e7479312a2cb53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157129 Malicious code in jurss-a1rdsea-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9aa683e6a596d7a61da74030e523ad4b7338f2c70539969a19a1771bfa01cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163015 Malicious code in nokire-nakala60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 757d3b6179fb49726961bff08190186b85fbc2bdab6fd9d88eb7110813b9cd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169278 Malicious code in trevora-cir8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb0473a519da071054d9631383e12a0439e953ac5d51c85de37b8008119523a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152890 Malicious code in asd-nuttr-sssda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb46c94c2bafd5273e87086efe9d69ae6f031258319eb491675cd3ffee42338e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyufafu-dafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50432a33c0b8bfc779aec96daed141a1329c52774f6e486d208956cad6506c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahfaeg-naahgsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4db6d7cf98451c36e60a20b7fa92fbfd978ce67cdc2509862faa304b8311141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae2f088b849eb5923bcb0e31d04593a58855d9d9cc0075e35d14ae9fbc75a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-thail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b53e055514737efdb8eafabdcb637734849cd0d75e69ac84fcf7a9ca230dc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasismem-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28721b692d5c73eb6d6ce6cac182135c10b57a1ea5021d6d5ceab785db524e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyilud-vamuiksknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5eee4c291abf5ae01ce38617cec9fab312414be84e97d9e58ad996710e5bfd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-korea1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8acbb36ce7ac3fa20d31edd6c3ee48daabd87abd979f0e43061e4712fe465c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169130 Malicious code in toyota-cir10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d572b2215b2a318951c7ae73ba218e4bd1cfc406e7be9e1bce1e6ab268f048d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab2b98a65b4e718f8245ae6b9003fc85aa396dde86ff16d3464ca50fa5971ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhufafyu-tadamafdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f8b25f8cd88f98130127cd6628db6b30407cf6973a772c8dca2eb18e1ba5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244ba4277698bee90ec1b5bbdac41a6dd6a4ebdcffb6cb11834746176d76dbf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022adbf677d8470752d4c1e10c29f5dd08d1fcf0969cb0aad593d2e3ff37c2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841fbdf12aa2e425a9b6d59e88707de5f186a70c2f4800600b0c2ce3f5a760be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tayic-iam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db8d8d038ca79a29b37e92386fdb291ca60ceecdf940ecd3e293a567a0d9889d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...