MAL-2025-178650 Malicious code in sayyya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53eda4a1611e4afa5c4eb7b3ca7144067a91f234dae3cfe98deb408cc1355488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasag-fnfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cded208a967f012f649605b248a1fb319230b618706fa688c8fa4d67f770aa26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175238 Malicious code in kapvino-socvni-fafvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189c57737afe00c6ab925bac31f1dccd80a09c6c9757186491bdaaf9f321b70b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-npusadya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494c8cd2b5fcef80e56ca888bdeb87e756fc05425470ffffc14d264657a7ae8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-viva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42551ae90a020be9a6a9c7920242cf72af0957b52329ffce498700d243503d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satu-aniunifaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f6617ec58ba85f90448af6ca48376443852c3187233d3f5a4336f0ecb4026c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in savion-goodmun-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e4bcbf07eb1c5317d5da644d942d6a42a3ffe32041f02a9a7bce9dcb2ff8ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-gifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c65742897b306ae591e089209f952552f52a70991d9ca77b92289f38bb3be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173649 Malicious code in butanaih-asfi-darufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 366203ff9d47e87960d279ed61d90f9478bf34a6afc43f270a3615bfd10f477f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d44670686f02a2707b490aa2f5f851c48c2332f2f38ee9f836319f0d0be05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175970 Malicious code in manusidda-nusadsata-manudida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e370826ab40696ed6c821f4c790c6ee210ca0309c0e9f7f6abb31d7fdba2958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-baf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c22f64ded383065623310d4f3e4d02c36e2e5479f7b3c6f2c5684b9c36cbae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-sai-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75bd9f93de9d85eed34bb80d55949e13b7fb48046c641aba5e2daa1ab951cc28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tuag-ivga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f027a1ae2df06970ca9d330cc74638b0b2eea150a185547b145995b91c266c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gadfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659bfec906eb033e041da9f48caa179acb9cba15f6769a96eade486d2445194d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tumva-diabud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38625bc5e649fd1f3b292f62933d5e7c7df282d6f069f60609fc6f64682961fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-fagafiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6769c6d722951e9714490aaace660f1763d443fde177f782bb855b7b914aeeac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b86805d5e7f900cc7e24a044339c06c2350e60a0056e24da5a76db4b839faa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nfigas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8edd7f5f45bcd64c4d1da7ebdeead714c5daf79bcb07359ba4348d0a083593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f641bb8f73128c2dfd9f035cf57e0385f1bab539570d5b2fb5d6e98dfd86cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...