MAL-2025-151473 Malicious code in abiuba-avimun-abupuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22a56042e937c3453ff1bb4f5cb72164cc22bbdabde5446338ce6c4a99544c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150320 Malicious code in @mipta1/yisas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f214e16b3644a331989dc5930d73d71613641af3e149d7158871c4f32215e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165732 Malicious code in samehadaku-qszess-ur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81244c1d64b598dcea35ece22eff67b599e3263f07751b34d2a34eeefd1dc7aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151138 Malicious code in abel-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2cd3970bbbce55b47ace64744a4b85bac35f9bd17ebc708d1c1de0e980a6363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151084 Malicious code in abang-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7258d46c444720c4543a1d77a7627189e03c313270279f38961d960ebdb552f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168511 Malicious code in tealove-nice32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b6c50d950c3e3db6496969707f3079de9e1b2e8fb7370e94ed89ce282c92cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79bdf3d9f200642ee404437512065b3b3f0b9fd4b39598105e7479312a2cb53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nitroacer-teajaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000ab5e1dc60fc8d5ecc2e747a2c89ed86f2b066c74e2f83ecd1b85c674725fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-maranfu-safar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928c767fb089b7752f392c35f9c0f7cbb7cfde5fec224acad074ed76390d2b18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-naiman42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5430418cf7739c57936c8cd23061dab862345e07b1e91610f8ca4d30f914a5d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-loiupomi-kilabarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d1b9c22c781a72b2bb991cb5bd77812d4d1089e59f847c78dcc79e4a6d81a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51e89d986914bdcdd560f4e212d3079ce58c7af8bc081a06b8e63c15897980b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-korea1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8acbb36ce7ac3fa20d31edd6c3ee48daabd87abd979f0e43061e4712fe465c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afat-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd95e0c2a71b40ecc2a65c34bc9cd71455c4e4b5ad60c5130b0f297f252a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165710 Malicious code in samehada-fzhs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9093451aabb3195bc16518c3f0db592c64d580f87f570e09938cc3f768d0a937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168453 Malicious code in tealove-nanami24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e3aa7c104a7b58d0fe556cad27f16c5f6cb67d84a453bca407f828beec2a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164233 Malicious code in piluka-aluni-ipibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea438574b260f2af248b4cadc118d19e8938142ff1ab15a6e2796d148813aaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164954 Malicious code in rita-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d095884c539343405bac5b43c4536f3f8ee133cf5d172d933bd8818b48ccf9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaasya-dgds-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969c958c342079f989e9df08cafb4212025ff4b1b18ebfb269b169d260a676f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...