MAL-2025-184219 Malicious code in modasiv-kuvu-baufbav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c056fcd6ade17a0c78b17b92cc5bd7fde37aacc7e355aa349e274087669a8866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181076 Malicious code in teate-thy-sonic-watig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153abf4a66eb4e8931d2b0a2676378b2c8f1489e771a898545c3fb37a08122be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177640 Malicious code in polymer-afaj-roffafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84b3e55fbae73dc843c99027774db298671e13d1f0965973f3d5ed7e38aaa88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172766 Malicious code in alvino-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defb12384bd8f44458a46e28d0ee1bdbaa1f209ee7c26e4698f5383f8c77bd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174765 Malicious code in hokage-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e08b55a163e140e6f94266d934eeaf36cba8a5104eeeb0a0173727b307b8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a592e7a7df85659bbe14f6cb8d22e3b130ecdab71bb323bb792b442782c8bb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d054dc6a1bc4540f5641dbc88c59c17d3181bf1c2c989204f6211163db77e2a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiafala-magolollani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43498bbe80c459f548108e280167fcfe8c2dea624d15b3386951fab6672e903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fond-copper-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679bc3f0be0d096c7197b95397a01d24f75767f4a40dd4f33a5d2d564a929856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ragi61-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6fcaeebd2d0ed3b4c93ce77c1c56cf87901a8bf64d96899d6f93771ab535fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-semur68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e3bb57c015eec6817a03e8dae881f0d0efb490088c2761a71e469d8b341cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125515 Malicious code in citra-sego21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179d33f92a983a9acf26b4885041b9c13e1785420bd29972cf50f9888b1a83d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127200 Malicious code in hendra-rawon92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa483a6e733f370e57a95f78689c8fe475b2bfd0ffc4f44374f411da221bfdbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111071 Malicious code in xaver-mieayam78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420aa89ab837eb2501e2a50ee2c0d08fc448e469051a662827d956f799165462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-oncom92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc73d6b0fd2d752cfb7b1c9f50d0fe48ad6c39c9e04a37d278f67c25e241ee5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84470 Malicious code in dewi-gado-gado56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7228d88e68a8f038c2867500843e443796be351d262d776a3e91386b9bbede62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-gepuk34-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b45fa239a9da1306204429c94cb63e70b4b2ba0009e36b278c0a5e53acc754a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-sate70-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64cd89f88c631e4c5f1116845d63bdd568099cddd1b452048a74527ff0773554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...