MAL-2025-173291 Malicious code in buis-suninna-mubanaaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389c11e6316e9d35c31165c781cadc65a1ce762bb53bd66c1ad164634d822211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173088 Malicious code in bafai-sunabi-cumigau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de4a2241b2f53ddcff0912b23c9030a5a0e39dc6e5babb99036cd1bea83d672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173146 Malicious code in buis-manais-boad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdbfc6b5d810c03e817c3a7b8a2727a903e22b6af86b4d9a5589333478dae0fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178087 Malicious code in polymer-rtte-trui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162295dc1cba500e09cef962d84c19a648221c76f87a205e2e4075963b7125c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175947 Malicious code in mahiyu-sutabu-gina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76151665a3bbad83d9b4a191d5412f36c41e0249c7f5d6127e2a2ea9d9133ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5142d23b0a351a4b132bb484688a27b975c128b87e409a726e88e4ba6e676f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9c05bf5ae9082d4b370226c1014c171a66ea49a892be75033f6136cad343de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-faivubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a29175406badc58908c2c8552f46d0ac6913a598cbbc2fcfe94b0231bd0a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasah-nuya-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6a99c246e52276899daa108b84500f42293beff4f0010c90b56ffd2aaefb5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satiaf-favurafant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96e62dad0d88c2afe1cf661b2f2730cb46f15c8e9ec4569158fac32f2430018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175286 Malicious code in kapvino-socvnvi-bofnvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ea0e0fb6b11980b81d7a8a5eb1ece9fa3cbe45e81ee2cc621dfb7287c33054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57519de18ebde216bd12ef5ed4aaf84b0fb1f050ae2138a844796c079f047ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c5e26288ed6e05bb15d411e9f2d094cc2063f9aefa89458212899cb6465999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogngh-amgian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a1cfaa0efb49a4d749c5359c15335af3c2088f5f50c2a875c34ad821ecea2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibfa-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1972910f6bf6eedaf91bfaa6d4dca4b379c745ded80bdca22223bae745bf9f0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-buy-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b599342ad2a8e3c2e550e77f14685e0a1e5a9ee423f41378cae33c17dab394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-ogofgadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff4ba50fc8440853174d13f61c86d0041c9b7e8e0330d66dfb3bd1514f32361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-buyaita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1724eb1d260e318e95fb5644f3707c33bf07473d47a393ddd5c75714eb1ebc9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tussy-sesrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cd912288b08b1a61be85d36e616863a08c7071b6c69c5691e4dbfe55ef67b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-dar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ff6df6e5c4281c8aa6495dc3994f5b1558dc2c4d82bf60407dcdd53180114a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...