MAL-2025-172733 Malicious code in afriiii-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176dc0f64c376f2a0d7b8dbddf2abe95b58721a832e711f60df0ec8c9ec2f687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173673 Malicious code in butanaih-asfia-darfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d457d03867068ebb7a13a315c7ca92ee7c877c3d02eecb751f98f602fb699ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboagah-agsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8868f64af406794bee17dc8462da1ceb94f4ae8d4c2d9a4df9fbfff9ea95e22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-aifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7360cb8f9371ff31de9c7731a04174c1704c887e8e11f204f6a58f1ce96d324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-oloska (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4247d9ca7b4271fa582b7117b3f488c5be03ac6fd1aafb384c7262d5abce367e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a177a268be549d58b8e13b48e41d765fa93e429cb8dbe2a74fa76ac0148d336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-agaana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9265548bbd550022f66995309b905d7881b2085669d7bce783754de772b87ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-madumovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e963143bc2fadd80c98a33a3be3782c7b03a216318c5c0a04d64d053178193f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429b1081c706744cea2d9e25cf77e56aa69d6f488b403789f1edf8c9b0bf6e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866a42110e39155d6cf7d4d75a8de04707160d10f50483fc0417c004e77d768d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-must-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1940b456e9bf84021f69f5bbfde592313e85883134c6a4351025a5d302eb0400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manuias-botayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534a0e91a45179b3677bbe483c01642ba531da66a94c5e42f6384c2ebd1f50ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jalaalokioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996c183d882ff7ba760a0f4939ad125faabac520c48eb4b8cc4ef4331b516a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-af-rdodd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b048954788fa6757eb8d8d19e176733e0cf92e7267667da3b044578b6aed56c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef026346f3cc5ef0d70334c73dfa1a78742983399b4758bb8d4ca6e172c95109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-amifagan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b71bd7e36522ecc6896224eda96ee8f2f0228f1195c4ad82cf3c7c368ecd273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9491b5ce9874eac4f7e7f194f1aec23731569b255cfa7a3a10b7ea37afc5bfc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-dad-rofdaadid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f737ce426f8886d111837fab3efd59f3c78908ad0de57db7ce23d6ad9bc326b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butaahu-asfui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9614fad06c2978226a1f73421a9dfe0e7d91280fe51428d1bec42bed81cfca3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afa-ratofafoafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512a812225f6d78e2da11a599f2aed8927a17c2a84b6f972adf7db356910949a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...