MAL-2025-178456 Malicious code in sahu-satmug-fanufaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47395a5a340e69e7f6ab6ddda80b1c8680a29e8322aabff3e5b3cd9afc0d7bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175912 Malicious code in mahiu-stbu-gainafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff3eee31764c094785798fed1ad869e2109cd67780f10dff5b4274143682f060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174803 Malicious code in hunim-satf-anujafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e58bec6e50ca1a93230a6edb0f7bb711f179d8b5a6fa22ea1df659c3474de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175001 Malicious code in irfan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319c238258bf65ed35aa1d8e9874d70bd3732b9fc98504d81df08da41d88d22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173919 Malicious code in diva-banibo-imifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54d753f63b8cc1e5677913f2de7c252f2680b0a12404a6c2ad749cf1af01f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173721 Malicious code in butauahur-asofauiui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280fdda8cd26ae8dfede26d3c18f932e2cd14934573a90b6ed6e1ea73c9ba397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177245 Malicious code in poglymer-ogaih-gafac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b401f744eefbc24a3dfbc99cbe537caf178b0dc6e70eab3c27c14b5843d3326a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173821 Malicious code in digo-kaimi-liabokam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d673570cc5a9bbad26246b7ddb3fd597615493b69930a9d19bf7ebe77539151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177684 Malicious code in polymer-afavof-afsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850a368b3cf413e099065545baefd04e6029b79017babdc75f21929fc61ee18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174600 Malicious code in haruni-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1327e71b2842c14a7943bc0f16eb7b0798fb80c684f79b45281992aadbbb6e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175507 Malicious code in kiki-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510d97affc75a2ef4b70b8ae366ac55482189f769aca9f92475e807198f3a463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173452 Malicious code in buta-fipofa-iuahfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01020bae7607dafae7f7c2ec811b2880c712667f32144797cc65917edcdd1d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178691 Malicious code in sgoodaini-sanugsa-utufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97178a603cff6ba5fcadda0967e342c991efdf2a12cfb696557d813682c32e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176159 Malicious code in miusafasdn-faafuds-afnaearaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b82f5eb97a4ccdebed857fe4321a0ae1744df6f6da79f6172f147594ec468af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178808 Malicious code in tanura-suif-dafgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b841804667a6e784c23db9508be24a244f346c5d98baf4afa046d7f609571a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179405 Malicious code in zaskia-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55814364a30d90f33ef6b22d7b30af31fa5ecd22833671837fa8573679c26dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afidaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6567d9954c762bb588829efd6804281b0c6146d7f155c4b0f7103a1eadc2ad6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-ravia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c962742caccb5382d8affd3a2c795ee594174f431e94df231d0dd1d6424812c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaiin-sanvgaunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad726613c8c6aeebaf06879b0a795bcd495858b5a3f1dd41cedd2de065961a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe575a55eb3a9d08f1f08dc6ad2091a67dcfe792d62afb3331645acfbdaca599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...