MAL-2025-177087 Malicious code in nuyar-adarafia-bya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f05bbc63383b01f327fbdda88ae230f1f3a786137cc0e5ad30a15374dbe6d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178406 Malicious code in sahnim-sati-adagoimaiaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ad6c3e24a465c64c138f2a3d360bff8d9982cf85f8f1008b439eae3d9aa738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174615 Malicious code in hitachi-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db30791a76c7103866fb2c858d26e15fa59bea0250744e5eca5220d96d948d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173055 Malicious code in anneh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c2f3fcd1e9af579b605ce7fb3c2e238d1b306c5ffe569ff4c392d5f46d390e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174860 Malicious code in hunimi-satihu-angafagifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f78aad0adc2b583b9e2710f1f19675e4ff12304f3d05d7799ad6027098a01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174063 Malicious code in divata-tugab-ivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb780ec0288232104c8531f5f6af2f229e97cdb8ce664844230220f08836d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178313 Malicious code in riya-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ce2cd2f1872cf2c3104161d6efc27f5fa26e2b33dbb47f7c4d15a018ba258d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabi-ivacfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea4447591452880b229dec26d2cfbbe652db695925eea5f7df6a78c788e6da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sffoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce46cfacbeb8c27973dc3662b340e245f635a027eebd30452de67dfe6a401a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e4f7dd82faa329c6164fb6e44410b956f6357f9a353b6ed62a8f6364b1e69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a689a1544cf171f25b7f8ad244ff5f797164e9b053e70a3b2458f4de446b70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570868f14f6427641e1749c0a000ef2918d494133a3ceb1150e01c9569ea5109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hauli-mudl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f54e57f4f496df3d5bd960a90dea1f85295946d757701526c750eefb283ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ac29e63878431601e0035d4a770e104b172caf89e44b1c50d8bb4c27260c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satmug-fanufaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47395a5a340e69e7f6ab6ddda80b1c8680a29e8322aabff3e5b3cd9afc0d7bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b90334e7c4e59372f4fa1e7ff350940e71b04b2b22b098683df5f48c195795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiagaihha-aftfsafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284815cce4028f3a014bf457e4048250b6f68c436224e8b97747ec41260e2b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-pom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3d753dfaab1f7cd55a51a5033f44d4199abc2c5be30266454b7849c230fcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsfafi-daafigfif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e309fc6b076251b203ae614a2af7e1055e9d90ab5459fdc7a0d0f0d4920837b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0970108848ea51e7b471db609bf4b255a88d28477a45173731b2cd86ee7f1de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...