MAL-2025-174712 Malicious code in hitachi-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a991f1e51d7d1016d81ae1d45ab4a0ce6b117afef8f48e1300a1e6a2af81bb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176719 Malicious code in nuilva-baviva-muvavdzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61dd75215365791c6bd92db28efdd37ad87d2350f5fdb4daab001ab3d034291b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1383747f03ff57ce8ab3b876b8076ccf04ae8c45da5ac751388c71cdf5a27352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugab-ivabitnfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afdb4bce660ad163112ef03c3abce4698fde196074742df68db644e4366036d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terui-umura1-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84229ab956a99ae25e25a692e75ebfa562e3a13d067041595ee442e7a43114bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunvu-mudvdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 196c28e464581247e9b16fcf789b727699a76d1c311e8d89f8cc275acc0e2365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimana-satgub-nainab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e088aa01cee90726df8eba7accd4a8b28b8f007f36d46ed1deac675a9589d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c0b0d46a61247cac165bf4e5b069ed94e46b04fa51f92b6f538cecbde1a2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rusdi-set-rusm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4916ffab542d4cc09369f36d76e1c302b9f4ae85cfd6677941c66c6e87f2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174499 Malicious code in goodain-snunu-nug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 059636f6415aef5f657be2d13a4f92fd8dc2faa83df21dce32fae5f264998b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimiaai-satib-nbib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cb6061cddb51949ec83bcad43889032b409fa00de2cc5fcb42eb4bd95da2a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-ffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfee8013eca373e0f31a6d80186baf8ab91e62e48f7c701d622214f048f95f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-sat-ananfin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7564b5a2f8eaae6a1fa8621acd6c0b3d25d261ffe70688a62226046689efaa38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-ada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0428b778941c5cd43b2870c541c78c0bb997c52dae817706b19980be436cd4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-treds-gusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479a686b0a97d29536c2ab49eef096774009e9ba4d471e97a86a91a11c2ccc80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwo-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e106750cadd8d8765e5149455f60c40215d8d9af73471f3eaf1d085b3d5945b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-buna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59111b651a031e41e4b4f5cf496489e325dc754a8ce3c929901825cc80eb0d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afhsfia-gaifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf6254d2052fef96f65683fd14adc8e224f5f9980a881de8c9b01b31ecf97b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-hfnaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7fb74e357086824b994ebbd5e29e4c48ad1907ea6380b7ceaeb842e5381908d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusidda-nusadsata-manudida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e370826ab40696ed6c821f4c790c6ee210ca0309c0e9f7f6abb31d7fdba2958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...