MAL-2025-159858 Malicious code in mansila-tla-mala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5099cf8c6722bed29c6cb56f6124ce85a2eccc22dc6a6e9eeb2968afe0d173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169742 Malicious code in uinsnu-lotaizmi-kulu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b48f38ee33e9f66fba6ca702584e2bdcf7c611650166342e9b4788dc67882435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169035 Malicious code in tehah-nutar-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c856561fbc69f482943b9dffbe62706dc4718a5f35b517cb1bb4f5e02493e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169132 Malicious code in toyota-cir12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb50aaf2920ed65a812c92dcc054b5fc5ee8ac69de31be2b312440f17faa69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153012 Malicious code in aviah-afga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69b9307407e17ba6a42a9aa64dac2ca3c9c60af5f37a3a907fd43cc496f9590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160487 Malicious code in miracle-dibook-ikuka1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe2fd825e7b6a4928ffe3eae643386565eef022f3d737d34dce909bb3802a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-boy9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2f842aa6b1fa3d0f73a43b20d1405c4ae1f282a032dd9372b64287f3204928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musasik-nuts-bodot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c199af124bc5e5df447292fba7f058c565fa6faec0a43ef61d56aefc612b28bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dee7512eb2ccde1f4c00adb236385da0fcbb095ec096e4f22cf8d230166062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5760ab3fe05494491bb29a94c3256f1a24c4fc2615f9cee2647fe5faae4b185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6edcdf9a5e7676d13788474ed9475caee935a625be87c1f357f82bf2a6483eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afai-faofamog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4247da261365c8c51b370fb9717b7b1b6aac61bda0952d691e67eca9793f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ea5a411b3392cda3ddb00d8d4f3b764f895b435925719351d061b304cf2066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6e10086154945d4dd324d1f0886ae780df842b263f8e9ea5d0755cc6444e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389f75bc615b9b462bebcdb3b789d17bdaeda25d1631385c5f4ccbb8b733c70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagis-fofyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9743fd71574176835d966dd9a0f971b51148e55a2c1cdd754eea47673357f125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da2a5cebd2fff1717dc94c92eff375efa5a8cc5f15f5ed926e480076339313a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-luknta-igavufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa83581c8a167fe942cd9eb5aa4b3b62e35f49f1a8aa9d769904a45d59372f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df89c4619131ebd96bac85e1d807b1e64314f6407dd112a7d8d1c66396ce2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rgyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7fa6d2d11d27bf4863b786b05e2e1a9a89f58476b7052dece8bd6926f18eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...