MAL-2025-184708 Malicious code in oloc-uyg-ugoofifaihi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b3edbc90192c3fc23c1f38e49a6d218898536bef10dbb09d384cd2e49598583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-comoldecoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980942773f1738a9f96b560c1c3535b71166986ea0ab14e646e52f99d6af8426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181629 Malicious code in astam-ifst-diakavgya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f4920bc0a65ecd67fc6ed76555446550bff40cb6dbaa451ac47a8646741cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182698 Malicious code in inda-fodja-gifaobga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9b1444baeb4f55212a864665951d5cea9e51fd6055683a1772c51528920ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyil-na10n-nitanuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8974189e285a5b5d746a1d34595c56421ce8db6583ce5245eeeb4ad65da0c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-afa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7068418f64220ccb559a27c9ff14912960a75cd1dd438eda9d969589b613704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-dora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2391ff8005197875595bd3f446b394863152251b6b323adc9af31e703cbd32f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yundisk-butd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0536a81fca66fc859594b93b93061dbd5dc4d6e6d84e0beeec7d442d8637d369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ffec18c4de76b888456cbc43dbf16ae57bd1e7fd008f5190bd65886d3476a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178515 Malicious code in sahuar-satidaf-fbbafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eadfdeef628138202b59ca8e566de58bbbb06757b12de9462942b4dc205535b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172568 Malicious code in verts-otimn-fofab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08696e8add3be72344105365b81bdcc354c5310b24de8da6b7acaedeaa1a2b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171422 Malicious code in joshuabennett (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b08583b72f3ba232c708f7a6e0f58b513cbaec8925fc2f6959f0fc2f26e810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-faf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a570608bfffc32720fc7cfb83268666e8f8a7101b37dac61eed6d156e7a0a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150358 Malicious code in @mipta19/dggfdhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825d6508528d004fea0c43bd5e8c3a8666fe45b18f36fdd9bab90a2030acd846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salabunuli-nalikbuia-lusbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea841bab450989ac6eb31902248c25c1abcea223e192e2f41e1c44fc5ea4dc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9b4f39374d9f313e1f09d3b3afaf604bdfe3fbb51b59e5f171306f42f62435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gzfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039e7cacc153e40507282e5e551cd2c6a70e97c93a150a616c8dac7c85dd635f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167383 Malicious code in teagood-nalikami110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224eef888fcf06a7e7e3a914d631a3c338b8488bce4997300a7ed47b3236e69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158943 Malicious code in mad-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fb809b4793aa087e08c279bca8aca8e098b35265912ec35a96525daeaea7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168916 Malicious code in technical-aloni-tolaankui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f8501c4c1dcf45f4154f56f84845b5f1e8a2fd90b58eb7ccd136f1f1eafebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...