MAL-2025-166444 Malicious code in sunderlan-uyilud-vamuikaasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4666be5632875274efd704ef1b99f8aa191efc334375bdcc9eb550f16bb2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165819 Malicious code in shilang-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73116ca0da86a13741712d21b904a301b3714a28d6b57d85750828da655b7cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ridce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc08404422d25feba1e64505e6dc534d24048518240529ec7e8548689c066c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee99375a977857db76fd7bdadc3ad615de3e08ed32ab0462030d4bc02ff45d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c9ed2bfc27c630ae400bf9c90ab272d1703282ce85b8c404d58187cad25fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4643810e5af272dea3c220dc8a013545cade3e5e5c09f77800da5fa1236c66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir140 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9460948dc295ea20105adf8a637afffe27b48d6cb83d3ce31f32e4d07853b6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/madan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368724ba58a6d0414d6d8c8809471405df5a76e96aeb5d690f691a017924adb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751b5ba5e5c4285f390b8f0fb473c498dd8fb0dd6ecf5f80de767a45ec836047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab69610d8c124e8d944d494386b2471fffc86b9089db509cdbeae1b8b6ec5eab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c800fa69e9140fc6f5da8632850e8fd2705b0b7319a4634ec3f418bc1caaa1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-dafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8ea4044bcffd4d44116f30e4b8302e80ce589084e68084c14c0dd1d9a300ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dea48dceecac533d3ed2ef00fadb2e40166aa5a1e30fc18a6e1c8a1d9954413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aikk-alni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d668c6be39960202c10787672cea8c6bba1dd6ebddbc925cb99af23870745e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 246ba4e135974c3e604f8fa16a0e5f09c3d7d7c0b215fcaaa74f7a0ffc82345a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031971a5c3d62a44c9729ea7ca18c993f3cf2e3f4c3a6be575617eabc466836f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutus-nutra-nuatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e063061e860ec40a5869876a6355edadc365f566b35c0d9f325459326cc466b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-soroiad-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d937d990867eacf16473a0556ae4e26aa0235fd46f41a77ce0cd7e728f4455d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofalib-bivaluabunla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c0a12b448314d45a68de25c6cb3893cb3c94d30b0e78350ca3c58f05452963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638290d39741b0bff7d8f82cb35434b6d14fa8091db6c13ad218af335276df97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...