MAL-2025-175281 Malicious code in kapvino-socvnvi-bofafanifavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fedbb5d5c662b341e43b1be0ccf84e11fcdb8c41f0910a23769949ce3e5651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178909 Malicious code in teagod-naiman4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec6826e84edd897584754ad81c5b7609b20e1b182bd11ea741a8acb4017fae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173095 Malicious code in bafai-sunai-caigau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b262b7ed9b5db00dcbb92224961d81980b3fa091b8866d7d129b72f2d30b88f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174799 Malicious code in hunim-satf-anj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2dd88136938720e586a9361bf7159b65d6a3a86dca2317dabed13f5522f77cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-addar-baidayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b2fa16e25fefd779cb02379d4534560163add22645ee79ecb57af8a75efe2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af605c9e1c0b99f9e5236b423cf88fdce7f8edd46c3acf6972ad3c3128e16a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadis-mamaadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e08ee131c6f1708789f54007f7d9b23a11d3ac4b05299fa42e5fdc4669de1bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-haldi-misalania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774cf3c38ed306885a7fe42121eb1a1a84219f3a9dd326850dddd87d131276b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nfubaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fecb326dd0bfcdb78e28f75955c418f1cc6bc62f9b70872e59457ce08e3cea47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tua-in0ddc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e7dc4b10a1b52b6c4c1cdba02adb8ebf16e292e390a2babf9573f7dcf1be09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidafa-fari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1511929429e9b099bb3a5f5512c24089955396d2156a5350307bf658dc12c5bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89104cd0323b717d8d6df28c94841e19689ab70af09d8e246ddb99ce6c28cd3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-gomaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843243afccd0d8407e95549f2fda1212ecc4275ca1527a1f19a79a34914dffc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufa-fugifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af772516c68c265f40f4070afcd2e40832fb3494782679224c1bf8bba2de914e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banibo-imifagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e080270429ed5a43fec30f66556966aa7d686b6ddad84b3460e8c7657792a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tresfd-tehue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16474b18d68b3ba39c7959bb3e51aae79d775da4476ff304a6fa6d451369f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-agajafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86a6a955ed4d2f4c2acee06e28f65a080d0b95920cf5f56e3a5235881f3b027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-munvavidzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8206d24e9c67d36dd2fca355db83e94cc7c843ce709e16774226587e0caca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bani-imubabuamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66060cee423f559d6f434f797c98ae03766645e7a28578c30c2cedc3858390a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fippoa-inaofufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef2b00d1c34987534649b0e142701cca7410be11598b7427c6efbbc89bedbb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...