MAL-2025-180011 Malicious code in lookingan-nanakila82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32022a667fa3d526790ed229130392bed6ab78f865cebf0a58f458aa9014d230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179573 Malicious code in anala-aki-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb3284e78e4e2bb0b358cc5ce6f8cb129d5b44c5859026ce5d639944287e864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-nafifagfofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d393a0ce7a7a4cccb09a1aab3d550c1718bf295d00b5dc1b6c6a244ac88a83ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sayyyyyya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e13e1b108ea78c267e064c6752c7d06e453e7c8088ebd7e0e058ffc434a5f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-minst-vusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8087075390bedbee654c5121f2239308b4224955df98289952446bc4cd5469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubt-imubr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74477d2ebfd7ebf613c73a14cdde6e935d6dc3868088e68c11c91efe28ef351d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nafanada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb583c823924a4752c1dec17fbd8fadd4ca23e07a03dc5f9902221d60ed302d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-faaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef0f1c98ceb540238e809bc65d7fdcdc9a4e006b2772ec544eca908664a60e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad7257bfba43bfb9315cd61be12109aa5f35e8a425d6f5c7ffe5c7d987d2e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9544fdba89c7e3180015c23aa350c30b8125e9d1ec6f12e84be7c61531cc1021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-giba-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb4ce2dd574a9e6173ba00f2b4ef060fd293d40f24c2374c9977307fb21ab9e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-darufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78993bb4e59d3f302be264924da46563c0ef782408fd81e2e938b097fcbf5bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-maniak-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408efc2a1b63c139c8bf5adb71d303d29dbc475cb91521a50a9f765b9d555fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-gbfaaibssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d5fb66f806b0132ed80d477e3ea0431c52d18abe6414533534a0568d2aaa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahkanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09395dd10dcb04488064227b52dfc2425f4a6d9d07171697ae79665f500c01d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadoribafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bb06e2b2adb6076fed137e4ae78fc0f65a0570cecfba9a0be7e8ee2a6bdd59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuua-in08 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc7fa4fa60e621fa7985104ff3eeb499d84489ada04d2e26a46a568896cca87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e485095ad6e8a5c37eca76b5d29d244c583184e5e92734588bc4aff9271f183a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938b68a857d6cf530ea1aa83ea685a4c1107a4b861d296e926433d5f9762bee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manahudat-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9247132a49933be75a619ea0113ca6792b69e149e81df449d848fc086295078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...