MAL-2025-175124 Malicious code in kapo-samu-mima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b510023e839b6b8cc1ad3bef2fc79926b5723dbe7547da519c884ed93bc3077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-ngoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b9c2c9eaef071397eb7398cb7948cdaeeb9234994c72e99eb1426a246a3787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-pajifasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10595eb04ca33228a4e29029c14f6ebb18e098608a8b91f749bbeac38ee515b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufabafgi-sufafi-caaufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab617454e40cb9dd489ce6195e3331d70cc40b3b149805fc5d05a17bdcbf3ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautu-gafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae301f0ebfebc8e3f2cc88299bf64ab020182445707f4dc1f25ac2f248bdd0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-butamnamb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca78133df4ee3af729499450b93eaaade90c0c5cdc0ffb7f3814c23dc608ddb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-faa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5bf3ab62ef408aad58a2ba9277906f55b37f3289df8afcb3bbbac8bc8439d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nnnnur-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945c76ab0c57365cb3fd423636a07eb5868f002925ab93bdba324b9c4e2b83a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfafi-daujhsiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dddee2e014c6d12bcbdf3e4167393f4ae1b2501bfef24202f7a698fd1b6e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-razfbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cafa2cb260e56a94e64ce9a07c990c17d8a37b223084cdb69cb2aeedd797c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-icav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c381652f53c82f8623c38eb74bc8aef5b44f81aba1ae89e31614ca04bac4f211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-putrad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d34ddf6c7aff7ccdf6b5c216bf7467244ae9808a418545f1acc6cb2e386797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-inva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d6ae0d8d77abb00597a58515f1d19250aac06752da8c725f848d25b0963587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afriiiii-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297de9d103d10986066438c9fcf87249bb2472ce4ace25e96ee3ced1b1b2234e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175130 Malicious code in kapvino-samvnavu-bidabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053640cd1a24b53aafc134ad74417a6463f4ec19f32b267d168624bd8b70ae6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah16-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fadfeed743560539da679410c1b0973d77d60427953be26db420f00d2135df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55814364a30d90f33ef6b22d7b30af31fa5ecd22833671837fa8573679c26dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174306 Malicious code in goodaan-ngusafa-ndadgia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ace8d7376861ad7ac8992109178c3ae1d3550e65b41292e40709a9a2eddc0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177013 Malicious code in nuyar-adadar-biuat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f61cd67c96c8c795346eb0b3904319c1b4e7b076fdddc80c0cc6575a0b898a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178958 Malicious code in teaha-erdsa-trufd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a776bf4d3251eb93b300c99c96696039842febe6b6daf8d3888497c8f22e250f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...