MAL-2025-176307 Malicious code in nokire-kaguya17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7124c5c263a42f3f7c4913236346fd04d792751ff84cf4598030dd820b0e9d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avafifa-fagssagbaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e356ea5bf5917365679cec6a2ab568333856b40ae2552b882be50fa97ded6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178533 Malicious code in sahufar-satidfaf-favufaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc4341a9e32ababb99b062adc3214cfae3326520dd26add65767506d8f61415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176781 Malicious code in nuilva-dakdre-aodoanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5aa6f0b089df28367ad39f3e348d36e3f939e9e97e6ff026f1289e51d265b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173505 Malicious code in butaahu-asfui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9614fad06c2978226a1f73421a9dfe0e7d91280fe51428d1bec42bed81cfca3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177820 Malicious code in polymer-avoadfifa-abohoadfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68246f984927f7bce790ac473c1def9baedbf1e6bc22b380234ab061ab879959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-lepaod-gula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de479787a6d46e4b44a38d16dbfc8372a37a722339bf30f02e869376c39096cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pom9r-nafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e7fcd1eed0caedb9cde2f58524bd845795311bf469a32697fcb782aefb82b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomo9r-nsafdai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0a0175958b21eaf6b455ccef81f82132ad54a7d71ae9d2f51b98c8d96f18b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gu-maivla-ubuntayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0a5709fcaf0874fd9ed66e834bbb62d6f31b89aa06bfd08b5a77c577fd4e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-manuic-tauwaanaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8f4514c7a8f3e15e0aebfa6602562f2ae1e0f49f371d9f3a40184e0e4bc54c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namesi-maivla-aiauubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9717bd64d7a597c0bca9cd09d07f29c407b4534354e8adc6529fbac4c767a7ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otfioo-namogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d93feb6f21af539e9edba392c354b86b086409e6efea0e4eb4f0dbe0a66f1bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otio-nahgiagfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a6ae502c859af95b248b169620e3975c88e2a73b9c32aedab90602c95ddb4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otodofioo-namoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07e9edfffa4071434659e3172ba797055063fc44bf224f5099db064d79e5836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pom9r-nominal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4dd605562fcb99ceee69b0b32f803bacef0aa3c1c4b1a8d4ee62e9145166c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172394 Malicious code in hereis-manuic-tamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5f56fb196ad2501a4aac5ce6b60927a69cbaf76cd06206ebe31d7e91630fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172170 Malicious code in aps-leod-nutayfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3208025a5d79571bd52482af1ca0a1048f3709ed3f23b063c1c5ddcc02eda84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r-man (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176dda5e83fe0c96579d19f15d68cf8fdd970ece3e012a66f51724ed6bfdd83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimo-nafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5146fc91236c12af5e60b3d841ebe7ba0c604b243f712dd7d6969849326f16f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...