MAL-2025-159493 Malicious code in manadsi-soroiaddi-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfec8ad061fac3cf7a95e6a70511364f6075f941c3d5541c8d6bb766344d0096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161759 Malicious code in namadata-munar-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccfd3d1ac48b7f55f639d52b7199c85819e51a829233e8ae81b0902c7b81a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158431 Malicious code in lookingan-nalako23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a95cc93d7e4969a7ad7d2ce1476e2600f5f15ad86222570e9a2aa239754e820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163903 Malicious code in nustar-miuyu-nutyufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7642e11c7bcdf3fc771c135d38a9fc0b9d0821064fa40d7476bc130b9b7cdb41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150233 Malicious code in @mipta1/sdtaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4342ede1290afd0e6a1b21784834ac21b18d214ffaf7339c6eb60052e6e23845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-fd-rseaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c195b4432b523d31f06aa63018941a006be12a1b233207300604fe7be29164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-mindatas-buipenaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15da89b3928f080cbcde72348ca4047d1935fec3e0d9509506126b6651172e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-boy26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bffb76c2e27185edac1c703757cada8d8652d8a14b28e6de8a13e8669185806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muuyfaafu-dafuamfufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25b4348f9237bc689b0a993e99251f988ced25c5d63ca8cf8d31aa04903ec7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maalasha-nut-posisio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e0adb48639946bda92df99e5a786d4aa088516300ff643c9db9c19c9ba1377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-klop-kalosoaibak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c8a1b5c63ec435b24fa71b20aa3aaf7b1854420518f5ae6c63013842355182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9129c6e7041ec62903c0825755b39db8878c106684639872e60fc45acedbacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goa-jamiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9cc578b359cbc3d657f8934e29a1026a9207b5e5b6763fa88faad682d0c4cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a674c1fbbd745c960e8544a64b4611d086a3599ada9c661c58d6a466ffe21899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansioda-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518723a17edd37f4c39a468744f3fc2d3f088d814ee94622aa63619343d73b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3b6f81543ec1c5bd0248f49fbd6499849856792584f465592e05f0d50cbfb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b802b3c613a536518bf009e70328468be994f42667d4a6482c56925b4cd95bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3fbe6eb3802015337084587adde601377bda62423ba69beb4f0fb100d4120c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f165a8eaeeb2d3b7be5046b3de37f8073383604ffde6b4be2bde5010652a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd56e4246f1638702190d3f129902655a107f56f088b2be75caadd5fe053c1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...