MAL-2025-179035 Malicious code in terui-patrip-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618b0a94a734b88840d5b7072a55ad492e0e9ae0a55c9f748ac46a8a6bd8df7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172879 Malicious code in ananda-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a409b0910ae4cc8f0b9a04387e391a7b7a8e3f4dfe9df43188ee92c7233d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172785 Malicious code in alvino-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9495c065dfbd725ca658d2e3d0fef2eb381d1dfed6f87a195ffda992a7439f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176242 Malicious code in munuffai-suffi-cagasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04467a8e5494cf57bbd86f623896d3b5829149c8260c61ff2e48da291a965bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174160 Malicious code in godi-tuam-inapupayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b22c78d28e8fc425dc4b90b54748910509e0aaacfb4278848355eebb41c7c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174804 Malicious code in hunim-satgmf-anujaafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efeef5acf0652afbbbce2d59b78c5fc4b80005ff78b20a9ef463267009c7006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hauli-muddl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468e8c3265c697d48ed139ce2dd54137c99b4259e10375c411dbc7171a22fd4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce4b2d368295c4139a1c9616f66a4ea8ef1627f045074bca42857a6551dd8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-template-treu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592871237c08bb2f06626b91c95ac90de8eeae618bb7ea0e11a9097a56314d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233612f4e6c9f2e8840092ede936b07f2ad9ae50421d4b456a096e7b60e02e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc026bbb647cef0a22f856ed44161bcd502c5ed4a4a3c2a002ca1b421561c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agigsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584ac00265e072aee534e7703da272117b3fdbf8831b785306952c4ab3c6452c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-fagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cdc49e7446c3ac70f595c3921d63f69f373464305b2759ea29939fd6fdb2391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897ea9372a618aa7b0edca02d92dc303c111b4a34b6182850a5e21e25765c2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-diaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12e6aa9106fab7e30ccbcb6f84d505d349dd2bf6750f06600b1b0eba6e5120b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-nafifagfofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d393a0ce7a7a4cccb09a1aab3d550c1718bf295d00b5dc1b6c6a244ac88a83ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-retdf-retds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a362988955dd0b6b803aea77867b9c7a2df0162b8f38dd63ab64bb561147ae91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-gauafioifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f6daeafe0ed141c1f54050554cab38d85a81db588d033f7cc5def6608cd99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimunaf-safif-cuagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e3eff0ff0d928ae84248e83783c99472f4b4d413fed65bbd55412fb5f59e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imanumabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa2ffcf07497a04380de3de68294c1af5800040512b48435dea352db1a31da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...