MAL-2025-177359 Malicious code in poglymer-ogihh-agsigagsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858d85dd7ed6a6898a0a5c22a495196de10757ed63662a9d3af074f77da8f84b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butauahur-asofauui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec55129f79f9109ec8047118c499aac27cc71fff739f16232746ee0e9bec09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satag-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284be2e04b9739016d09548660b310d8e662f055ca8c5878f11c6a36d42cf5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabuai-iumaivac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44c67102b7004efc89ec7b057d2833f8a70b45a57dd6906483a3e76141b2a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognmh-afiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00056646eb491d40a9111c222ba824696906cb467ec5a57e8ea5b476fbfb0ee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miaandss-nutayurifa-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53cda3cc41faf93b57a533b2ba45ed7b2c88e404a0b2cf86c308043392dfa82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc018302a1fbc22933a3c76a97a7f8248b8326701c30d629fdd213059cf2630b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimana-satgub-nafboaib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d662c9543b6aef9f112eb29e46ec91979fbe2a6f506d028c06d8089d97e525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150d19bb87befcd6b3538ae85152ecdb556441f66e13c8051ed4ec215a8c4acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaism-liamiaor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeaad80d26784bf8a7076d83fced13ce68e387d7c306469e38d6d233158118a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avm-rucasivasv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2dfeae5d9812a272117c1e717225a8620b43f7aa05e94e6cd9e50f1ba4ed07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tusintabi-ivna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72554a33f3e580dadecf1fc1b14ff11a1d79764c3efd1c6d1977cfa6039dd523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b411503a7c6035813563f39184685be698c3612f252fbf3c85e4aaff3429e188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mn-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fca0665b2e2f707d644605b9a126fc600f7b5fce8facaacfad6fd0d10f96648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-butaur-mgids (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dc44a25a91942cfa74710fb7e6e62a2b704655537d6ce1f30b6f8e2a093209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174932 Malicious code in inul-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19335e55ad193359f11a2043129cf1013902cd082dcae9bd3da8fbfe6c4a2bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173874 Malicious code in diva-banbo-imanaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b980adc0f90446fd77db52b16a82e259ab80e9989b12b0bf10d65311bb9080a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178168 Malicious code in reion-tui-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542480edf3b2b7f314b61fdf9cc3e7eb19258029f2c0270b5adeee72131ea795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173601 Malicious code in butanaih-afsa-darsifafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7d1b395e7d845138a08e751fab53e980b9aa3ba71449fe9fcd795225e0748c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174561 Malicious code in haritono-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9bfa6dab4dda6d005504aeb4376521adb6d4286f4040bc59c09aceb04f4ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...