MAL-2025-174335 Malicious code in goodafin-nui-gibafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cf091520d293d482273dc03d8ad9303072ba4a5f24c23f72f77c5cf321c18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173868 Malicious code in diva-banbfo-imungbgsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3916dcaada7df1a51751e65fdafb32c9499c26813ba1539fa866e5f16ccb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177495 Malicious code in poglymer-ognamh-afiaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956c423bdb5038c0c49ce7ca899141b30c2c309423e4cec1fb370fb5875657ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179175 Malicious code in thumbi-vs-yunit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932bc33c6478912fbedd1e7db522bcd4d2fee122a9ba408d810194baa4563094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174903 Malicious code in indah-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77988d1cc2b22a9dd6dc509a36b1f232cc9ab9b041cf8717ab35c34cb3467a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176081 Malicious code in miftah-miftah8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c542bc39ae046359f38b62b5cbfa3ea3f518b33b7d1e360f8bfa76efa039e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-giga-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264ac247412eebced88897263959bad6e38b0317ea905c7860614c9fc42eb55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmm-rucsivsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4897f6edd5632c090be92e8cdcdc1af488e6e1cc7a03fbc1a9c902d4a9ecd171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognmh-afai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9471edc28d52c15f0ec9003fd2d6c49522f3ee445c66b644b7cdba7be0856b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dbb996eda096b19884866bc6e7322f1dea32e72bc1de78ff1b5be9ff101847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-stbu-gaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1008a077c819ad12067ec6c3c17dfb3e8a70895f0ff3fa59fcba1cd581dd7101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satf-anj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2dd88136938720e586a9361bf7159b65d6a3a86dca2317dabed13f5522f77cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-buyai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec4cf557d0930950062ac93e740c4f5b437c8def38e60681a0baeb93205161f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agafafagmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2022c40274deb78a6bd93c609957e6db660491c3d74112d6e8d5da6b84adc6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd48308141a59705c0383b7ac1fdcc6cc63e335fa13407d570d5b0a85b27924c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyg-gibafitfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5303ae700ea6b5028cb35df4378112111744ced9c984c3a12fa2d08249fc16f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satu-angiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75de17b2d52e714cb073afb0daf9a1593a2e6dee5591b7d114fb535bb8d4610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fafhaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44a8a9fdf2cddd86f5135f7350c89c745822ea8f7e9991c87fc7c931a91de82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-haladodi-misal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714a252d6ced764557084484dc1d9754ea04b6acdf4c340711749591f4303f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42fc1201ec9d22fca32136c586c79f88b75d88d7946822972ce6a49e93055e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...