MAL-2025-177372 Malicious code in poglymer-ogihh-gaghuagoaahaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4f638644398c35cd5f66c3c1fb1daa79b4d7f4b82f0310601d8d80a95b33a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsers-bgtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c42ab10974cf39c2d2b34948447cd3937533971263d12f6bbd30f28e06786c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179367 Malicious code in unimuna-safiagiaf-cuaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797d03332f40088cd4e19f432d6e3a4c9cd0db453e1c29283dba1f9e96ee99b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-maifmava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7a4dcf31359171e26de6e6146f10025667e798523c51e3a9adc21b3ae608e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nerfa-nutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4b2600a4ca0ec9d0e30acfb8fff92f1dfb75ef394245d3748bde948639f128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175495 Malicious code in kiki-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e20b68495f4ff821596f45890f93a750c61b91233b7aeac8144f38124b59dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176253 Malicious code in namacida-minuday-kasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e0f296d45a317d6313156e6ea922dcf625e7953bd68f2dbb44ed9331fcd253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178124 Malicious code in polymer-tresfd-serus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2641ca7075e6285624c86b71b7c54432eaf4b5c4c165ac1b027ef9d90e6ca0bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaaaapa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e08801a9eeea5f61a25a3c670b8466d1df95942eb49fd797d0b46ad02949935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaaaappppa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37947da18a71157c4cb6ab1b242c34e986f6095252f98a39c3a01876b8f1d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb87fe0b1d48cbdf48bb27cb580473b30915548dc90bdf4662768d7ccb33bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abtengg-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d7df12a0a477ed56c34e96f63df28a12913a236e366de94e794eaaccd1e7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akuuu-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70adfef646c6c52ec2969c35231e491b4f311f1070787dfc6c2c432914161da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8509e8e7891f4ea1d9aa5c498dd0c9d44724707005628e64a383425d94a2c4cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8442ad98a232f3053f831792444b19e1942e14b4edd450526b77ce165cda9218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f452fc6873dcd3ddca58db3d918f55417e78b5e016734f398fb3d67febc340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8960c9c4ee4acece400230330a3d1df9e35b3b5a8b2efed6cbad3cb46de2757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03ff1b8a313b7ce652b9f434e3de148f532f9c21bf40e25cccdee92108e3f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b439ec9e13dda10890f4cf1f15feb7a2c9c43abf87bd17127d7029c22d800e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anehhh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57751ce78af026555f97b574b057b98b6ceab59755ac451c38df88e166896c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...