MAL-2025-178668 Malicious code in sgoodain-sanvgunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a448a8bd51e7f7983436f3e6c9cd2798a231be9a45afc69ddaf30cf4c91a5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179256 Malicious code in truay-ozp-putrd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ffe50eb9e52408360c9a1b21eea9894ce580d3ef0cebd957a561e2bbf80b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ahnafmunir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed4f0843949b32f28f8d6b7836fe1bdb89b354f62bf5626b331acf32501f83c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170759 Malicious code in ajmalzaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0debfae03430364faaf120bcb9365edd5da76dca74dc1157df4c01ff82ed9ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-tuad-usidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c32b634da703612ffb5c736af2768fa920f7f2aa88f81e4834cab6bfddccc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155520 Malicious code in gurs-manus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503d732fe252b9a1b5aec8e5d3f5fb2a21e43d50ed7a4eebf8ce74d9ac13bfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151546 Malicious code in abu-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa9ae6cb3e6acd0e47432bdc60b0323ba776d9381122108e3a7153919619010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151106 Malicious code in abeh-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f63aacd97168d7dea8e1654d522728c52877f89f151efc75944e78faedc52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158776 Malicious code in lookingan-namala62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3731eedd2a408433b3bb566bdd7fd10d837df875cf25636769877aa58b16d564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150701 Malicious code in @miptaa02/gzaedy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0da0d9932a4a47f608d8908a69dcaa6a7823d5868c4217e8f607c36caa0eccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150782 Malicious code in @miptaa02/jzdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74751c07619ab82b88e50f90eb7a863f0a46b54d44127a3eb9f04acc197229e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75595fc76784c137e61715968bc9495781e31879a64fdfa785fcbb567f1c9363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-teadf-daff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0ccb9b925cd4cf4652e251cf939d9379402aa0fa92af2272f4b05e3ffd9094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analusia-pafai-asuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc08fcd7e118e4b1aa155951442372d5e53af818a0e82bb53197c924b7486227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-nautyt-nubl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0249de3f52e800fb17973d080833dae87e155ca15fe87dff672d94d3a840be22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-adst-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4243bfd356451ca205a5d3c991e159e2f091c58f66e18795b643347275ac927f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juris-qass-urs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1700f22e38db9826f96a05ea9a60b5172c82584cd9f41107d2951dc1db52d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c361498839cf29a00ccf24e5b3aa5e88d6864ecfbad513ad7f1b83b68279b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-alvbai-ayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8cfe027f205b758d3dc91356e78cf915de68135452f8b1b4cb4bc5aa43af21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminsah-afbafgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4692420c12c3744d1504541ab79087368c3a3a5ca50785acc99736e4ce7404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...