MAL-2025-176422 Malicious code in nokire-nakao30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8635eb20ea14ef844bb4327095b8a1b41c3c45fcbb40d8e51d15f90c373ef768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172956 Malicious code in anidata-hd-matsafifdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41170dc4071f246a13ed3fdb61ff42b4a2a0be653b6ca36ac5a232ae77749dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173248 Malicious code in buis-sunia-nafana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7165cbfb76fcf196276eb72ea0f5796bdd9da041bf8bd103f6c0274710b0a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172954 Malicious code in anidata-hd-matsafdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8bc040152dfd20d7334b428d8804fef743ac351fbc7b4737b29c142eb43689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175479 Malicious code in keke-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ca5499ee64242592ba203a909b4c8c4de396892b5992cc264a5447997c4851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179048 Malicious code in thambi-bytss-dfdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d91f25bf79305fab4133f4846f02db05ffff963bc64cc5e42e24676f3025d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176834 Malicious code in nuilva-darde-ogofigagadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef5f19fbf83606eeee0e8bbf91eef4039274146d1f6642d1cd9bbe8603ce79b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc0c45d61eceff1deda60b695121c60d413429a0bccb88f7469fd3f080f62e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fippoa-inaofufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e3a3f71420bae11ffff2118a968e0925f09bf13cdb1b22fc408fa5cb2777630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautg-iafagugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4040bebbf4af85bef043fc4fc8e9c836ec4b5e6a9c33dc33c13777587a3df0e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akkke-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103739e5c087af5207b3df544bc1f31c6c5e75a78eb20aca45187ea0184bc4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-dufafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a479e63815240271a80504b789191e1048975f96da67a38a844e6a59600aa86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satifaf-fav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea031c0bfa846cb994dcff7024569af22492f71da748b05e237b3ae9edf55c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaiggaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6731d1ba8f35768991b6af91aeaeec3f7202beff7d334bdf3761dcd4fdf0b2b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4811338c457fbf4d7be6b6406c0073e1de6788d4a404adf731c86cd27405c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99559d7ae43eb043186f87ce718d119bba6142bce7e69cc6a04b3ac7da16e11f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-smu-idabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d74c87947aec28bda00c39d23dd58432513d6c3ccdc1eb9753e590f02bcc1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ad71113d08d3ff352b13d10631fe5f4ca4a366a6b7806934a20e48eb1ee194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsbers-yusaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceaf40591a53da27e654ff0033e6d1056704d20a98cc469e70c87c8a659419a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-baviva-muabvavdzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 625716b4bc027b1f7d5fd7a8dd06d646fcf2dbb03d02aa914a06b64d383b5a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...