MAL-2025-178727 Malicious code in sumpel-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929c7d2a0bb80e68379130591e882928b6deab23549131cbc58da25a3cb7b0ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98f448319a0eb0e9cc09e9cc7da0aa76de3ac688998e83955881912f61b4abb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tuai-inusja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816f2f34e2040a7ad15ee7f459c950b5e63a643660a0bca03a4eeec1cdcd2f0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-nutayar-kadsia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba9a9576f63722e18add2b2835977e3cd8322da3abdfa2e67216c1ded76a08b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b385612a66ce55d5769f6f4643f9f36f0159b383dbdcf8e34e30e636dc6ee68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimna-satib-nbib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54befd1e2c0eefdf11656ee10f63d3991fdc80d8a21c22a3908934cb71b48e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173416 Malicious code in buta-fbona-gdda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e19e3569e5340ae38d51cbe7a40d43991487dd31b4a436b3f6f357be36eaaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178025 Malicious code in polymer-ibhaghsigsabo-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4c279a8786ffbc561f76d55e7faeca41ab3ac0f81ebc84f3258bac0b89be8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hauli-madl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f010788a51fa48e8403aab91487d2d75de720d36e6e1d622eb02808e3dd04bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-dau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b607d43bfc163512bceabc74a84e1858f56d9fc5aa556c1dbd16e52a2bc89d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasag-fnda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d20cd3d844516ec18869c472e7f8cad7750125a7e796041190a1c9c23419afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179133 Malicious code in thambi-xion-tersd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5623955a6120e91ec2e5e8082bd69d5daf6571c86da3761c99e173dfdc3c9e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afajf-roifafafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80e101853696c23112294ab1f2237255b4f1f3cc3064bd47f7cfb0a46df2cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175011 Malicious code in irfan-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ca1f291f3060495c2ae719e46a14a75f1f5e1a78828f708b263eee518c44a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172773 Malicious code in alvino-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5706e90317b82930734016969e099b6a9f008aea0ee927b6722120f1fef47df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174654 Malicious code in hitachi-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3401b57529ab84fbf4e914376a692548c9dd237dd3762b2bfa00f4d1ce658fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-rsi23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda025bad3d6a117fb55417a1f2003c2e1f9450ac9c3f3b69d27bac5e3384ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177361 Malicious code in poglymer-ogihh-asfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1534d7c89354121c04f1cc3dc84911ffd2fe6e046cd1783e61bf0826700f4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2ad5a07130a5849dc61fb44b622cca08906e38909fef57b9fede2c3aa602a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rrrrramadan-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc7441361b59b3575998783ad94e9c27866d682b1a8f78f3d6221b1b79cb31d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...