MAL-2025-177267 Malicious code in poglymer-oghh-fafaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b79573a651ff01f8c4837245c9bb515b0b6db9a9b72a3f044259d9c556713de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176244 Malicious code in musn-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f78fff59c03e508e7e43e0d7ff2ea0bc11a8cdf380f672fd9a01987c8303c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eaac6143bf46fb4a5c94e2a5bbe3d3a5dec0bc0d7632f6436a70668e155407f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3598e4e03d62e2c444327096b4957b24eb10e3fae649b2577658235a9c1dfa78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutafia-dagiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b8f6d968dcfa45e30a31c086fd25798f3a57123f840bcdc4681c74195dfa8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-trusd-refus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d24387357fbadd69ef9bf3fc5795ffb13936000588f5c2c7587e6e2f1de0165a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nuty-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c5903989538a6c84eace4b96923acc17f59035951f868229badf1a4a9a53595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofagfgdi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7bdff361910612ad5866f24d6bc26a53778ccaceac8dacdca8ed4fcb647b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d910a7e1f352e495ff1101ad587743b13346bae6efd489fd0ad923280505a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hali-midadil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af63890bd282bf76c7d88ef28f73e5cc3a1854416302bbd3254a8eef333c76a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612ac05282764393f485f2ac2285a74c9c0156114dad4d519fcc380a81be1741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-olka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5504b7480cbec65c7dbcf5754edf37532b743b0e72455ce93c9a242744d74818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satmg-fanninufaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9bc31b966249e54021c9ce055acf3284947a06010e87c7877609973c18c813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asafui-daahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc63fbbe76ddd376e576469090ccbcaf5610cca46e610f23da21224047d96d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-gauafiooifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05de303d31f1ba4cfb7fa51d0a20ef63c95773f34967fc32afc4a317547b7def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ca5bea346bc3581648d6e6583c40d0ee70bc2ede88e3b0b1991624832e971d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175522 Malicious code in kim-jiwon-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c7cdd6ded9086f94e7bf15a23146c63b851cca2a8b91826212ee985c741b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173727 Malicious code in butauahur-sofi-dosapih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1b8ba026d56a76e5791a5b79e9a2191d6c8916061798eb7ba7e47d90a711c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172648 Malicious code in aaaaapppa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1076169674b64013e15b27d875a832812b8ebfa020c49d3070962367e09cba98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174615 Malicious code in hitachi-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db30791a76c7103866fb2c858d26e15fa59bea0250744e5eca5220d96d948d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...