MAL-2025-173405 Malicious code in buta-fbobna-giodaaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843308a7a27d23bcfa8bb616b47bb2620c0a91aea91d82ee6cbc634b78f16a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175949 Malicious code in mahiyu-sutavbu-gainafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0dab9ddde946a9544528f502571cf7b5c9a4de601609f1bd0c56769e752e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172875 Malicious code in ananda-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03ff1b8a313b7ce652b9f434e3de148f532f9c21bf40e25cccdee92108e3f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176861 Malicious code in nuilva-vmiam-bunmaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc6527e9148ad65dc783a39cdd16cf2608d49e4a4cf853ec29909dd5f57ca06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174560 Malicious code in haritono-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7436f768da86c71aca94ecd046aa6f98f730ed03eaa981d696a8902744e4e57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177219 Malicious code in poglymer-ogahih-faifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997ed52118bd70df34795b3a922a3e21ba41c6e298c0941007ee74832fcbf500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5788c3f86a548eaab02e1270561ba77b4cce313186b1ae9569d916f3c54bdf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174497 Malicious code in goodain-sanvgaunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc13308354d7faf3d500b9aa87400815167aad134bb0e4466005c2b5c29dfa5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173943 Malicious code in diva-banubo-imanumabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa2ffcf07497a04380de3de68294c1af5800040512b48435dea352db1a31da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3485fe21e42d845bfee181f788ab26a2e5b369c4eef0b03a3fa3ccf92a9b5cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29f3f765e01e504250765dd4ebdbbb2905a5f988e497cc5fda8a57b7c0288cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godivab-tumavai-dainu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a7c2eae896705f0addb26f1cf4b8880cc1ed96c46303221cfaed93bc329791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiobuna-giodaiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c63867a3eee6c3d837b327766615eef4a022ad8f09bbd27ae85010eb7984087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-agiadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6cb8290567b87c9dc298896c84733ea092b893a7bcbecc1e002c382a92a722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-afadafn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae7a7044d2989e202a90606f051a203066819bf33ca4d2c2e2cc80456980d361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e414bc0920a7b1727962d18e6f93944f0abadcf7ff8c8ddd13729dec02697b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-pran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ed2628abd10b1a53b2f0cc60f47c2d6185027567da1a289789412bd6a0e17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-odgafaagagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bedf8b34d1ad833e101ecaf75cee864a37580a554d91fd6fc45fa46cbf7f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8e578c68951164d350fd046607240447df7b5fb2c855dc2fc308b66850d027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-nalika5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a1c7559abee32e61d1268e51ad5b4a57efc2458198ba0f2544d6ce30ad1e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...