MAL-2025-166735 Malicious code in teaa-reborn38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2758aba44f676a165a9fc041a44db6156fe7866f16c137555a9cf2a22ca7a75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150000 Malicious code in @mipta1/easgr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457d0975d6ba650be8ca3010c6d189b2e55c46f5c120f8ea3fbaebf8727c6493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169244 Malicious code in trevora-cir49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ad68d7f5d8f1149eff30933893ad747e588d12034f4dd99dd8cb25fb9e27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe93576e307e1d02824e5846cf94db29b2ade50d946e937f59c079c5a0c4d3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-misuanuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca2108caa852cc0264f4ced7d032d3ed3261ad589536c0e551e80945f60fd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88f0189622db18c34a3a402e83f63bd1f5b26aeba9f5971f8779814c5b78bcd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b522de55584c7090db74dbf0e7edbd6ada8f19f1f32fca99c32a7f9978550bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaac02fa7694dc286458195420afc77eb7b2e0918744bda3c37c8c744ce0d1b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-sa3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705c2f034ffea819555a1309c6a9df958b47473603ee46bfd57c218a37fabb28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8ed42a9ba35ae978d6f705ddb51c47258d6664734497f56f4154529be823ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c712dd1da353e69dc6ec3f5e2a73cff4f5fd119a933fde692e86e1acf84364a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0697e5b20317b40ba0db68be975992275586e2d2c2c7f5ca06c7eb5ee3b2c222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dokloi-ikalusak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f025c49b21e1367be3d717db40581f1c2fde3b6812a77fe4c98fa7dc5cc60f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-bunt-butya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c218b8489e13fb4f14fff6d1d8f9f9191986b21b91c4f31436690d2bfa19383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4a1ec97303841ceb2c238afd04ddce3434c47bd341f318fec7095ebf69639e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f331af433639ff4c22152f3995548ec39dffddb603cb991e859ba4701acd6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2e80a533b67b712672e6985391aa383cc0541f1faf41fedec2fe5784144162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuya-bauyda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a60eaa212a37543305f376ed5c0c3adcfe16706b949fc0157926d9819942302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alo1f-danaipik179 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1b1499071a36457661350b073c96b55a5c537b47628d3e8d6506f1b51c529c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-afta-fufff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2264da964122e8ad4428e2df60c53ded0383eb4afcb4b0f46f60047934861a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...