MAL-2025-171052 Malicious code in cometcrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b8ea76e310fa30e77d0998083ba48507435731a76bae6ed8136fb0da4e64870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31c0fac9c75286104e4b4972313c244f6431343622573e13adbae09fcc8d8a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiaala-magolani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b66018bbe037de700dc19ad4ef441c2247e185aafac247c50a62a0142bd99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1876100ab7cf7fa2387e98b7b85f3642ee0387ffa6649e4ebb16706082fcef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubli-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8048932b34d1b883e7a44303faadceb75259c6bb8955af8962f3a0010e9f665b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6343bc62085048e7fd566f6ade19a97b4b864b99c213869a23be8f6e4f0db06d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbian-ifafonabof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247bb894f96b8f8ae62d0d41f5a0d2b0e46d5efa16cbb9d9f4d0a304e1ad6774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofity-goniesfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99839e1906aa31077bf299621787df07d53d3915e923fe3ce28fdc83cb93c9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c287618652f8d54a6a2c45c9d496abce7c9e8c61ee797dd206ab5b8330fad2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afai-foaaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf404dbe9e0a772e4fec6bc46e7b15cfb2161b598d3099f91062a0bb566a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pmpr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0232815503b862ca15899491484e37a00f9a40e7552f56abbd042de7c3b50d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6fdc447c4638176be1574bf3913f117d7fad4c6470f57100d6fe84b9face036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-ala-malikaoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a0783b3fcfd135166081b5219de084ff2081348001cc26031e1c54b126e02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avoanh-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2ffb989eace66fe72e390c76892c57d445597e636d71aa5792d3d36dbc7c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-faf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a570608bfffc32720fc7cfb83268666e8f8a7101b37dac61eed6d156e7a0a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-apsa-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f540e9e914c4324c6a695e7ba88b85b67bcdec64501b4e230fd8d54dbae1b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0754007869171530b3dc268e4cc1c8b19c194ec455cdc480b4d7bc91698ad77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16182b6155e8ecd6dd360ed617e85ea69b422d72c12576126f71942a6f10ae38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afaoti-uufyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469c8de69c567ea9032573925528223347b002f7300d5a23777468ab59e85aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161295 Malicious code in nabila-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dda0260ae6a0e804deb7ee75f88f8691d8c46979fc9449a86722ce5190d77f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...