MAL-2025-173489 Malicious code in buta-fs0boiobuna-giodaiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c63867a3eee6c3d837b327766615eef4a022ad8f09bbd27ae85010eb7984087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177683 Malicious code in polymer-afavof-aff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a9e62bb33e86ffb5ba5a748d1b8e466e03c9782641fac6a4a2d03adc1e8d97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gu-maivla-ubuntayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0a5709fcaf0874fd9ed66e834bbb62d6f31b89aa06bfd08b5a77c577fd4e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomo9r-nsafdai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0a0175958b21eaf6b455ccef81f82132ad54a7d71ae9d2f51b98c8d96f18b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r-man (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176dda5e83fe0c96579d19f15d68cf8fdd970ece3e012a66f51724ed6bfdd83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otio-nahgiagfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a6ae502c859af95b248b169620e3975c88e2a73b9c32aedab90602c95ddb4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pom9r-nominal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4dd605562fcb99ceee69b0b32f803bacef0aa3c1c4b1a8d4ee62e9145166c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-gsaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d09244734b6d0a2efc334cc6a308b88aca79511aceb155713e8bb8f5b3e79b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otodofioo-namoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07e9edfffa4071434659e3172ba797055063fc44bf224f5099db064d79e5836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namesi-maivla-aiauubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9717bd64d7a597c0bca9cd09d07f29c407b4534354e8adc6529fbac4c767a7ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-manuic-tauwaanaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8f4514c7a8f3e15e0aebfa6602562f2ae1e0f49f371d9f3a40184e0e4bc54c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimo-nafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5146fc91236c12af5e60b3d841ebe7ba0c604b243f712dd7d6969849326f16f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-leod-manartoaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da39a2e5bb9122b6de30935220416055df7e625c399381940841ea8459622cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pom9r-nafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e7fcd1eed0caedb9cde2f58524bd845795311bf469a32697fcb782aefb82b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-lepaod-gula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de479787a6d46e4b44a38d16dbfc8372a37a722339bf30f02e869376c39096cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otfioo-namogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d93feb6f21af539e9edba392c354b86b086409e6efea0e4eb4f0dbe0a66f1bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otfioo-namgpogafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f37bc7d012f5e8f3c0c0c252fb4acd016153831cc1da181f1096a9e731452c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172523 Malicious code in verts-otigo-nahigfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27311ef2532e49c6e25411d9eb3fa42cf5877f12dbc41cd8f13004434b158277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172545 Malicious code in verts-otimmo-figafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea711f70ca235a20c42facf92cf7be7280e1983ff3c56a64c8de2fa3a339da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172501 Malicious code in namesi-maivla-aiubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4df234415c7da88fff136fda482639311563406d5645c2d0edc39edfd3571f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...