MAL-2025-178570 Malicious code in sahufarf-satud-fado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc47a6376cebcb8a8c74df9859fccff409ee0e41bebbea287899a007faa4a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174194 Malicious code in godi-tufufaja-inubufaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445ecf8e4a785f865d22d52969b0b363df2beb43cdbd041f282b192dde9e4c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174261 Malicious code in godiv-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bdb70926edd32967987e67c855c8ffdf820c17bea167c832e4192806375a777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175710 Malicious code in kupaio-kula-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445eb831acdab57822231221373a32afc6df3c5084125d0202224b9aa087ba92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fasfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b483ac6967b8d7ca0b079e2a8f8840199cc910a6a31ff582836a3c36b744d472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditi-tufam-iubata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb1362867c19117436c501debf27d27966697264e11cc64d95a7a98145bf3d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusia-nubafatutai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a763f5a6604f2630e684a080b4212127cdc9a17e519359b24bcd9fa2162a4278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabui-iumavifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ef6145befd1f8e3146a0a7e757321e2b898b06cd29159122e0ce8e249228f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4faa0f31692af7ac442eb0b517edf370ff7d922990c864407a390ac8e725d39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9214268a4166248256a1e8935bd10a175fd84b7ec4cdaf49fa8dca7887ed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0020e4417dfad1edf552be665c0e7bf4757cbff467957f35fc5ac613427556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimiba-satihb-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8eecd130eb5afeffe02f36dfe792e83752c561fdb2de76e286d2392cb13977e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufufaja-inua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4a2fa246b51fa214702000eb2907147a9e85f13625dbe9cc6eca5f47083668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-npusaxdya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e55741b65dc15abe74e9e8394f1058251cc5729be65d544922e862bfddd2314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1fe4e13522846ed5eb5c9124585432e6a0f137692b9e1f9392c9f664fad1054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-ravfoasiabsua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d2ce4a29167b66d4af6e5ab87f2029d066f01b70febebe49c386ad8df731c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutuzp-pert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384abbfce40751267521cd49fef0093c166bafd44ff8e231a152984cad0ea7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-npusadya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494c8cd2b5fcef80e56ca888bdeb87e756fc05425470ffffc14d264657a7ae8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-giyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efed51db6f5cee5df4ecfc594f55584cf2d82f2f48f46054cead52edc1f1f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-gf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528cbc61a84190a4f3ec327b47ade2d6539b28bff07d450e0e605729bf46ff96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...