MAL-2025-175707 Malicious code in kupaio-kila-jakaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7b0c65bebfc2a1b553ea17ac566816608348468ce0841d32ba3f753fcfcb8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172806 Malicious code in alvino-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e03c3f5951d26e7aca247ed5ffd1c5851a189c4141aaea70517d004714a61459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fuvafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2afa8e155ebe4ddba158d620bb6adfbe36025661c47606bb2e90d896febe24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jokosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c50c9631c4da1ab18c750eaedcee0be6a2e82299dd1b98f3f4d56f653c0e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tma-dibud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8afc065d745c2be45ad5c924e8e9534f6eceb38be29bb1a32b3d988be430cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-famvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae9826d732d789c1afc31f25b6ecea91b05b4efa71f0d1ac0843b46686ed19c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6572fccdcfc4051e4fc9f0a9f27859225b9f3e7787518d50c91f5d5961f5f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutraa-nutar-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7604cf42541dead0f1f0a391fb4eda7abf11b19c409ce85f404dc636612ef7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimiabai-satihb-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61d60fcec7e99e67b4a896dae241594b2eefe3316cf0ab87f4ea1caf8c871e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdsid-raadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57c2614e0a3c485f2e7201cc31405dc23f90e486972bb76ce07fca1393278840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-aggsifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94dea6e8d7dd436388ecabbb6d1bc225e5dea8d6ed775bac1074b33e7cf90c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutafia-dagufuatag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8a1ccf4f9e6a36b71ec307fdfc71600335b6846c9a1502980b988bbcc4a5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sanvgunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b60ca5faa0d2ce79bdd835c078f40786a587260b3e43da90e6b8d7755f60c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c7a09c80ddf619931d94a086524adf7f2e13fa53bb158aaf41ee09400f967e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-afafvbgdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1c04fd28b40db36732c09ba36509259bd5f4c2ebe38e7a2db2f95ca6023845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rs9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47372bce5ce26118705676749e75a346b4540701654a4251319a0aafe4ef1ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satug-infaruduitaggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 826f8ccd4bbb511187d135d2e0d631e8ed3012c4909f5061a35667ded42e0741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banibo-imifagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ba7cde1ef45e8d6472b7899f9b182571f69957231d51f25734a55f4f9f1351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-madmovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756f2c81930871805c13b4447801b58d045949dad5ed3489ec88ffad2bc709a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godivab-tumavai-dnainu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc29718176ba5ce3006846c30af2b38035d0e09d516a8412c068212d44e1f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...