MAL-2025-176678 Malicious code in nuilva-bavaim-mavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5420cba5ef2ee8af7e1d51f401d346b3e666bc702f71e17b94105f421faaa959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177083 Malicious code in nuyar-adar-bya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4116d7d3bcd455ec1ca41fe512e20e6ae0593bdc74b3aa2069f3580d170fda9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175322 Malicious code in kapvino-sofgdi-gaofgfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26bdfaae6e470e282d64c438420887ce43bbbc775fb2c466ca9510d04e0696f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bad20d35cd755106587a15ff40d2290f4731f5bbca8515a5c343b8292a36548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jokiloua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adb433fe17da21678a7aed11a101e9280d4b0ad0c876859c977684619fe00de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satd-favafira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92e903dd97e22dfc885640df2837b17ee5a14c376a2dfc1dc9e97a36bde9148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e890e166e82e67375392e48f70386ee81068a07197433d64251a055e221233e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusidda-manuidais-manaudida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08631410ac471228a2e6ab335bf9d01705727e3f522979648c85edc6a1dc16d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2befb07441d57ca1944d0c580dafc478d96518397427a7fda34ae43de3e7029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdulll-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d45d859145ae92765f6fe76ce2c2f031e16725ce240045be4fcb33dd7d8653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-aaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f1126347415a9c3addaf2c053c0f0c943f4cafdf6259341b11bd9397d25e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaya-s-aasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef2f44dc8e7065203ac952a765b976d6ea9b5a178f2c9063b94e1fb1a04b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiauta-nuagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e790391ad6a1eb9f16681ee1e0a2207bab1b195a8d0563fdeaef5976236a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadis-mmabadid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17207d8fbccc5fefb303e4427e4cadc6afe9cbadaa9a7b9c9f900eb67b5c3599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imanumbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b117cc063f77af53344e303d4c8cc085823cb8936fe5168e998bfd2f9a23ef25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bodaasobsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8025b597dc410a296eacfb033beef616af09d3f4a0c663643d20fcc47597b7fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156779d99f9ee392e62a1fb6bfb6357a77a552cd1451d813569324e1bd93a848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c1df2726c9b6171a996997df412e8787e6cfd3557a5dc94d0abc1784636971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abehhhh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae85fd0c1e0547c23d771e514bc05b228a4a03a551f842bc850501ae77d1bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-muma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0fc650099bc6848298497601b0b2ae077c651297175e7fbcea64bbcb1d54ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...