MAL-2025-178693 Malicious code in sssaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9403a3e33b93bf031f0ef9cfa6823558a8a7f852351d4f9cf9a03e6633081de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176627 Malicious code in nuilva-avmim-rucposivosav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8959a35db3d7c8ddcb7acc90c910a392f7b347d89b94603483fa5b7a7dfd50ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukuoila-joiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53daecd95e49c749b10cc53c71a5b8de23759633de7a6f6883de1ee736029388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofi-dufuofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3cff9d96a1ec3cd69794ee052161147486616ad5f119cf98a504fca18566cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f4653d759636d8d6888fe65c8c3723f19b03d9fd0c3a142f2fdc3e9a8c6a61b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-ogofigadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d46a65169b6f80de879b0bf694ba9ef97f13735000741ffa95123881a59fbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a297e0df8279fc09bebaee521bfec9ec4cc28aa98eb93e9c8e827c8a9158e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokiokimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257e63d6146f9d4e3a108c20db3583728bec0ec47f2841678fdeaa81f224cf98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-gbfafgafaibssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30962e56b2dd23f17b6e81a6347d7f43beec1a42697f7c640dcbc3733ac49e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-saduda-miada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8151e0d29533a2040eb4e43b07f11ec5ecdd71b3338fd66bf6c37d9d9c3a6a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-mabdir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b3d36f446733ffbebd2c29cf7a505493b4f1ec943dd2eea1546a74a7a3045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terui-umur1-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3cd38e05a6bce03961384b9cdff9a9684611ddac2c6c43d5f24ddb291bc04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-buiyd-vrfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0c66215c66f343a61a18dab00dfc22e4519a243b6632121450fe9332dc6a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafadi-vanafds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1cff0429e0646bf9bb846467497b534e37751b3eb47d5687ccfdf9ec0c98fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174189 Malicious code in godi-tufufaa-inuya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df5cfb5588583dec41c585f28bbf0a5494ee4d6a919f912938576286ea07d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178046 Malicious code in polymer-idasia-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d9b6700e20b38de85772a53eb2da78d65152515884bc50c10957ee283d0b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177307 Malicious code in poglymer-ogih-afiamafdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1532f2bbd01f3d621417a818e3a6ba8b0d84eb3d1c079e751138dd4050c5970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175476 Malicious code in keke-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c652053bc81a10f806d5cbd2e506fc747a31accd684ceccf9d7d05cb958022f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176846 Malicious code in nuilva-dare-ogofigadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d46a65169b6f80de879b0bf694ba9ef97f13735000741ffa95123881a59fbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178606 Malicious code in sahunim-satudfui-fadoibafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4157fc736f32015ade560e6edac6272dc0f43caecf39987dba957b6b6bb11f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...