MAL-2025-176669 Malicious code in nuilva-bavaim-madiaavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce711a72e55145afd9763da28c1063e8958df6dcd5ce43da1caf2af6dd8c87ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174708 Malicious code in hitachi-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6275af897c19dfb4443a4b10be3fefa1fa3af6450960765f5da5f327974a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177365 Malicious code in poglymer-ogihh-ffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f0c37710206109c5b6c2cd40e3fef0615ae168e3f9dad4afa3f376bd7f3742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176797 Malicious code in nuilva-darde-alif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd79da6d8a2fb9d762563b686dd3fed4502f24f3797a058c133eff33a912e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173512 Malicious code in butah-asfui-daauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8336b4e48823a27153e9ca371749d188992896ce8e28cf0d446a706252559688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178059 Malicious code in polymer-idasivagfa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ded2d840fe73e9768882b00d00d097b6d295dd93f0e6675c9b96230ee70139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178170 Malicious code in rindaman-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4db8cde3c7c9ed27997d6ce491a1d00e13863e6d9e8b0f3e909ff7a4c898ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178580 Malicious code in sahun-satud-fadoribfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb91c3524d07dd18987d0be46fd6c8fd5954d5177911d49594fd61b1513da646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jokosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c50c9631c4da1ab18c750eaedcee0be6a2e82299dd1b98f3f4d56f653c0e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6572fccdcfc4051e4fc9f0a9f27859225b9f3e7787518d50c91f5d5961f5f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutraa-nutar-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7604cf42541dead0f1f0a391fb4eda7abf11b19c409ce85f404dc636612ef7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimiabai-satihb-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61d60fcec7e99e67b4a896dae241594b2eefe3316cf0ab87f4ea1caf8c871e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f063445b35750f510e52b772f5e670fc168d6327cffc492dd2b61d999ed304d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdsid-raadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57c2614e0a3c485f2e7201cc31405dc23f90e486972bb76ce07fca1393278840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutafia-dagufuatag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8a1ccf4f9e6a36b71ec307fdfc71600335b6846c9a1502980b988bbcc4a5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c7a09c80ddf619931d94a086524adf7f2e13fa53bb158aaf41ee09400f967e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-afafvbgdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1c04fd28b40db36732c09ba36509259bd5f4c2ebe38e7a2db2f95ca6023845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rs9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47372bce5ce26118705676749e75a346b4540701654a4251319a0aafe4ef1ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaghuaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce051774213a763606f7c315cc465e722516179cec69806edee7d7027659575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sayaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6035fd0b6d5cbd6dca25d4c05616795f113b2b74810855969b0e7fa497d8be3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...