MAL-2025-157732 Malicious code in kuinsu-lubki-nasunnbaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae257bf2e0b65643fc7a42b906d12160af4e08a30e6980f4223bdd924404a74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155245 Malicious code in fitrok-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02b7b62c95a1491f79e9dc5833d01944a3ec4ad14b86fe97fd3441ec9d35eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154885 Malicious code in fadila-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75bedc791fcf80cf07f9c8e711c486a58a146b65fb97fcdf1116ec3408077e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160110 Malicious code in manus-tavauil-maoihati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c775229e16dc841dba9adcc17564afaadc5deae397ce066f611bb0ad0f81ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99afaa494e07d7c868417437d54c1d0db61f2bbf941caf6227af55f8cdf61f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4163aed1d076846452617420160a0232586dba57c0bcf855fca81c1b9a24bb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuba-avimungi-auugatoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa145a87bb5732be3cfa08662a50417527e1ba2e507b08a3b8bf58855250ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-idasuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603b6592800bcf7e2815e932fdbf2f30227e8603058cf98c2eb2f22589005974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe6ff5ad14b593aeb7df2917cabc8e1d47acaf240b3f087a100c739aa77d89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1738d9608eeaa3c38809d1df244059d867be9484a75df5eb0ab96317e5e6043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-sufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector facb40567e7bd2589c38e1629d7df1fa39660a38002fb58d8f7cb5e21f8ac52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652916d59af648b1276c4cc919546c75086f97a1f423095457a2861de3fa3547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d37ac08e129c9b44df8a3de1b2cd340dada43158334be6c56f67f3c3b6c8d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2dff06895b4b9f2fff582d1e21f967dfbb085362e046bb9809d3ec1b68e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-faradda-butya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58260ebe9f89109283f95a52276f189cfc13c0abd250b81521053f9b828db1d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-aurusta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04feb3acda531da9a55092242e68d0166df02c4faae77568011ae68852d40ff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89415c85fd45b2589ac5201b1b509eab1739f268f1a4e7861b3cf68db420641f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-aoaf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2375b1bb3d9faedd7c71b43ad14884503a29cdd83037c4290f2cf5d262e33ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-nisnumabutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bbf43101aac0b6792bbfc969cad7321822112b013f816ab832e0e1be9938fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-bufugabit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e80981bd4f0a2a42cdecf143974a6e930b09db352401cefacc96e1db81f8246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...