MAL-2025-174767 Malicious code in hokage-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d25c4211688d818f181dbd2f365a0c63a7f6c7fad00f3b268066f258216800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yunik-reus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2e4e97bbc76a9647adb2523857ca8caed56ce8425c605f93578c149d20398b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174759 Malicious code in hokage-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45189bfe72791d38873b49a7f740746cb265c948d44425cf2e5413d8c5cacc8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177916 Malicious code in polymer-datdfadsid-fdr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd403a83e439d002a2df7166984a7160d0f55e1d79e6ab588234416e988689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176374 Malicious code in nokire-kushina50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c839310308c94dd9aec8241a25e1a05a711d12095f468b2445d0ca19beff9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178180 Malicious code in rindaman-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df2451a632052d8124ccc413ebb8abb891675e8ba0741bca340d95294f915aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176794 Malicious code in nuilva-darde-agalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929c28f424e8056da7b682b956d21444bbcb1bc71c6f75f6e87f50b0d8d14994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174003 Malicious code in diva-tugfai-imagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610e2e46c62b65c0822b9456cbc14017dd503f4ae6de4fbbf0cbfc95ec0029b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fiuofoana-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc5a522ed3f893f1ba1a14de88b037adccd6f8b1f10659f4c8432a77e00bf91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-ngoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b9c2c9eaef071397eb7398cb7948cdaeeb9234994c72e99eb1426a246a3787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hds-mad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456bda0957d157d1f9b309147adfe21d4a56a03200b7af68150b152e92478a2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banifbo-imiugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16952187123f9901c39672bab4d127c0283bd6349301937933e319c1ae4e86ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-ogofiggagadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299d6f783b229763a6e31ab21876084f4895624396cd8371683e20ebc92ecb08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-softfai-du (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e2572a53ebf2a4c5b3929342238794811cf1154b8c26c5761559df2efe0d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaisom-olomalao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cdd633d6dbd4a5e7ad0785d92c538f6e0589fef7905c7a5b255a3c1db455d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-somagogamoi-gfahagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63a49409ae73ead18dc88b861195b8477279b7706e2c089f1222bec8dd121bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-afadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0efe706012f672bb413ad0cbc12cdf9cd3fcce1c5873291f7e8c537882cdc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336a0515e95635582049950f9e033463edc064f5aa5311e84d63a69020d089b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minds-minst-vusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ec720a815a6d199b32826accfd7a1addfd7bfc140c480606584311cdcde954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174409 Malicious code in goodafiun-tufa-fudgifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf82a0f1c6abf16dc8d27c6634da88009d6c5ff5e3d9276f846f7f7e386e5f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...