6 matches found
MAL-2025-175761 Malicious code in kupaio-kullaa-jai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb55ccf7bf669ba76fddd49d13911312f0ddeeef28ef87d50ec1479b5014336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-155459 Malicious code in guras-ters-bru (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab475cfa4eedb5ca8526fadcfa0eeaba6d186f41d78f6d09d392d306fada073c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quickest-purple-ermine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d899bce0438bd2931cafc52505ffdef936c0dce2fb2598bb6fb7f74ab92c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in candra-miemee90-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bfecb95c4c063cd4a3137865ffec8978adc510ec1b6eaa2507664b86374afbf The package candra-miemee90-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Malicious code in eka-gorengan18-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebb9ff045347ddba5de434f71fc161c4026453f919ef0ebedf8e827b414d583 The package eka-gorengan18-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
MAL-2025-52485 Malicious code in tuti-gulai92-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415d61032ebee2bffa7fdc63e88d9ba71b16905a2cd5f573e64189a80f741ee7 The package tuti-gulai92-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...