MAL-2025-158551 Malicious code in lookingan-namakiki40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2024b4a55d411708f72493f60407806f09db4caf49df4b62affb2823df870bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159447 Malicious code in manadsi-sfda-muradaiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2b6b9d9fd273040100f70f5ef4c6715bdf2c6464b5ff9f2be66b53a2a34665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150231 Malicious code in @mipta1/sdsffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c3762fca0ca7d9c5ccbd4837efe88b6b6cbbb75f1555b0ab4e76428a320927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153695 Malicious code in billa-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf39a9430b8f13e3589f37579dda2c4534a21ba132b1a9c673aae2a63c3f10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154847 Malicious code in fadila-poke114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 759a15a330a73cf1a0777f88e3d863181c67552ca301059088ddb74b37ecce7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151867 Malicious code in aiboa-molipie-aramsmia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb048d4db6a8e9912acbd1d3e0eeb77019e0878e8d3f39ae1bdf0a9f131ee83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159062 Malicious code in mahnud-magu-nugragaima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3dd1bfbb5b3e524f16d1cc6c6dc62c42a53acb050da58cee7a28c784c916a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150117 Malicious code in @mipta1/mdds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51086fd057881ea38169e9908047c858e30f1f1ef9040225bf373acbc430eab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157382 Malicious code in kamasada-nuyata-bunajda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c68290cbfe2db97c3365f246ac59fc011a86da1d69016f3c783415f7d88cbbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167188 Malicious code in teagood-nakama24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf907214c12bb4a84223e61605ee5f4c192e7814f1fffbf7da477c716002c92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169209 Malicious code in trevora-cir17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f545e8b1748c31c21073c1767b99a10ac716a40f2047816e0f6fdfe95d57a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161788 Malicious code in namae-nadua-maio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032615a3af703374533191ac2e9cfe38044a17d19d742b93aac4e1279b207f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151344 Malicious code in abina-amibn-aguhami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39db00df694ae40264a09a6dab1c6be797103995bf6853f3247b66a3fb323dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161635 Malicious code in nabuf-otoin-aiagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8931a138153188c25de19843fd4d7795372bbb6a5df891b1a2186a8ba799fa74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157133 Malicious code in jurss-adssdsea-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ac6a2592f4e70ede1a106a1bf7878eb9166e20ad8928c831d5da3698416ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163504 Malicious code in nokire-zabuza17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c8d9d80bc269ca257a5e8079a323ccce0a4d5ee7c152cd91ee7272e242aed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview aes-core-valid-ipherv is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview format-fns is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in buzz-invasion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a7617eda9ffa84bbc251331724293f7dffc8f255e37b2f026a2ce00f4fb5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-hydra-weywot-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f121b1962f33f6f178f0b9f8dc9bee590afdb80f5fcc6e4a087f70a9f74232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...