MAL-2025-178839 Malicious code in tauhur-sofi-dihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252d8da77df5ed5ad3b95cc60c5fca6078c21f34b56525684b1e180d7d490b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175997 Malicious code in miands-massdage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2838695c79e4b4ceb231184c1e44551b99588e6d200fce795d4c74693e104a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173132 Malicious code in budi-m-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ce0b35edb28c494f7df4eb7db7458270fa72cf163dcb8b78be0169297c81e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-taqbog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de1b3502efcb3e53cca0008dd5ff72b8d67daa9a23d41d417301b4bb20b51e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaaaappa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15b062405006665b22d457297ee8b2054d9ff6829f4ef20e25e76bb637a5214d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3fd3deaa2d95ce6183d65ddb6f427aa8c984eb96b7c230b37e735a4c216ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5138aa919349410594dec54bdf76d9b8d571dcfa917b899a2e18209c383d898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rs6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3aa1bfae364f7794d67e2312c9f08eb8153fa078062a545de7097753237f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-buyt-butui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bbe7a491ca55d5a7a003b91905bd92e1bc4fa24f7dd1e8cf3210fc8803105d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-sati-fadafuifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1003aaec09e8a17fa9fd69e7af31f5f840eedf1c5ae3889e7fddba0c926463c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke127 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9652548e75e9cc01688070539afa938706fa2bfc2b1be3b01c6ee13a883f49d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-giub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c473c59a1f7fe88e9966f6a6912de7d4aa88a34c46656abf36955ade0417d40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-sjddi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab771be4a6319658652ed729c5434b8702c9fe3870e84600dbd4c3582dcfa0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7f1649027e4778ff8b5bae03311a094ef500932c52be08f0f3dc24391d1ad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tutabi-ivu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b455f36ad994348f18aafce5e8de92d6cf7002cf8b87ef4497690aaa7828e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-dggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f9322bd9af4e9ee1fc6a16c4a64727a1749831f33fc881e60c186771279576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e92339217ba051c6afd7560cf8618a7094859b577bd4c7ae33b9265aa6f9a9e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-template-treu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592871237c08bb2f06626b91c95ac90de8eeae618bb7ea0e11a9097a56314d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kimdjiwon-ersui-vert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b9b9dde179fff395f13df8fc0f740e84eac5b0efad1885ebab85a76a84e442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67f0abf8da464594b0df87ddd490e70c8f45ff9a187f16d4c0df705eb59570a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...