MAL-2025-172971 Malicious code in anidata-hopanud-mafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3790d7abef5c1efc7381169401fe24687aa7c80eeba68cb275507d6524ce6c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173001 Malicious code in anidta-hauli-mudli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4507b938aa3ab7640abaf9038b5901ee816bdd47ac7f1c16dcaf0af9dca832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179037 Malicious code in terui-umur-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932373ce00cf49d74f72dd6886158b5aa409ac517c6985d4ef3b706b99a2c1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bofafanifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb988625790eedf739a3e3937587e707dfaae22106f2ac778a62d52579a7d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172822 Malicious code in anak-jalanan-mdn12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56defc26da6b41423eadaf8aafbb6f5ae4c4e231434d3bf61e89b46879522cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172969 Malicious code in anidata-hopanud-mafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c60f892bd912ac7f93b3631109eca5ecf685e088b4a511ce2ef09cf047eb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-fagihagga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57c7cafaa7a85477da9b0e48baab46ff90348024815d00dfe4359a1ad43e8617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-manic-tauwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca2cdf1a1dd98b639810500911488fbde6d05b907aba02ba04ce48cddbfc392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171764 Malicious code in rashidabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e94d8706acbc901f025c540e831898dbce28a041895f40692825cec2f0f70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aimannaseem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9651067ee4c087b5655f869d2183635e292d7ab22b1e6fef7dded056896237ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172032 Malicious code in yudiputra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273cf005fd4776f081cc0046ea49c3983c9f386484b30dfc1088eb310e0a3a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir138 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503831a3fe4b3f5bb1ccaa546ae045def12e9e048fc03788820f0c8c3838e38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-aibia-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4087f82cfe1f0042e05e33c3f3d231764c7ef3ac274603bf0abdd30b8682b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-strange-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f15b103b79b0dd7fb98f8361d4bad68091eb22e7e0c760a68ace301860a83d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irassdhi-ssds1s-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dd8ff07ca9caf63772ea862595b881fdf36cf9747cfa4f5443056ac38d218c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b446a45a52b81db2a8a829a9f9bcfcc2998b9358fb4617685e7d421558ab31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibiuk-itaruknyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905f40329ede985a7cd64b5f5e0bc460c895c110d1aa415b013e74a376631af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a9a7fe47fe1520754a5eca1a623ab97e6b8b1713d952884ceed03fb1be724b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153937 Malicious code in bufpani-mau-nanauayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb33900e40fe8c5ff1ccd49b176cbe7cd68defe26e50e25b35ef3fa6c270ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157632 Malicious code in keyla-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 187465a7fb2b0cad4aac12147a2bba8a4aff986455389a804fb52517de8ab010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...