MAL-2025-151546 Malicious code in abu-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa9ae6cb3e6acd0e47432bdc60b0323ba776d9381122108e3a7153919619010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162000 Malicious code in nasution-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be99206b8780cd4725baa3e2d40563822173b637242fc280519faeb5a2e8f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153489 Malicious code in avomainah-fr-fauda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6ab99e4249997e7749c7552442b32ec365cc0718709244e7d0af1bea8d8c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156891 Malicious code in irashi-2aa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea4306e8c518625590928f49ee35475a775bde8850db9021a7ccf7f216113e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155534 Malicious code in gurs-mipta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6fbec7b60136a8d1f30303243bde415f74cfdc86638f4f7de4394628de1759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162081 Malicious code in nokiragne-afgaafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebd1ef1863d5a5342a1ccbef93f4254d61db35496b3c02cf78696d3baa1fb0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c497681201d33f03da7bb71206e5f008cc59bf70e35df1c0e3bfdca2f499259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luiu-kanuaninu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b03fd82dc5e38440815137ce369d3f11a911c9f2d8504c6b47c33fa995a9a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibuna-mobiule-amzaueiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10017922ad44e6954da14fdccc1aab2e4e8cbb596d61ecfecebee8d640aba342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c589524085844d5dc78082f5f657cc41481b4518af0876c223b509ef214f4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uyilu-vinliumai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a69752bec600ca65775a4964bd53f2ae67c1663a9c7a331166d9a6c74bff84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/dfsdaas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcd9dff5d642ab7ce5e55ea0db91ab928f4676f82a238769b0c6d01e92028d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-luballio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547ceb9c30daec18ac7604090c8e30e48e1f7688b27f6c385c388f3926018c3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647003763da1747c64fcdeaaac53bd90e3115a4fa839facdd0df861c19409ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5876cd6ec8931286e83b63549bef1992fd1b12ef8bff32284bba9a548d74866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irassdhi-12-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e48719194550afbe74c98a9758eb46d38181b0b830165ffb8bebf6aadc30d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f394f83ede95ffd8a57a97512d759734205b766aae8d33272d866e126f692360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1179f7a3a939085ba356085459e7411ca589021632a27c0c2b169adb8643e84b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d03f418e86779742e43fff3115cb200316626239a643d4773f03bfe30f8251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c324ece74986f35d0e620e78b92958f0af04c1b47a9e10887c1fcfc4acda5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...