MAL-2025-175829 Malicious code in lia-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8cc85fdc079b7e706c51718094a6c739939657ba748ada6c86cf94cd9090fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yutrs-yuhgd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b275341dab4dcfe430b41170c9a5e3ec45a896a58498e0588ef476f46e876bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178943 Malicious code in teagod-rich7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb30ff0bcd9bf2501ab1a57ca0b8c7431e735fee4581dbdde486a0beb56ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ter-sohyun-srassav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94015ce607b0e0ecdfbb3731dc35d2263630a005cd6bc0fe4876c08270637922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178152 Malicious code in polymera-anari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f446caf7ebfb894d7cb4eb703148a44612980c7d80a34f92df0ba19db12ea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef772a2bfd1b19dba4ab4d748bf3afdcf2f853f33e81e06d24766268689170f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-agaaaammi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f84905e31a99ddb357cc7661f211cca0381e1baadca5fb4a822b62935c8d1bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-masidasdage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf87367272398909e489a2cd369ca6793bcbcbd1ef88cb5d9fdee9415dd76e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hd-matsafdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8bc040152dfd20d7334b428d8804fef743ac351fbc7b4737b29c142eb43689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178405 Malicious code in sahnim-sati-adagoimaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00711a2370a6ea468dd3b250e299cc3c057d53d6c125b314855a821a3d584409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176633 Malicious code in nuilva-avmm-rucsivosav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e0be671c95e371bf14f1e30c55e8c8914d068f80fe48b2d656a9e20f5495d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172772 Malicious code in alvino-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a274bffc45a0a11e493cc6cfde3a875c5b99121539c4527a8c31fefca79eae26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172850 Malicious code in anak-jalanan-mdn40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693522d4fe50191ba162b567b2f626addbc570cd1998179f912c2b305e5e41be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177575 Malicious code in polymer-adag-aggisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dab6f15f304847b4a177aeaa0e9b584bed322476e3b2b472a82e3cab5b4bc5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imufngai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7673f38885e88e1447d3887d3b5a1a786bb52bbbce6cf1140394f4809a08be39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngasa-nafagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276a5697856165317e61b6cfcd02ae4539c1c992b8a3d5cfc34e2da8cf7ddd5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176413 Malicious code in nokire-nakao22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11915dadb7fd2ea8b3cf2db29c7ee2030f8103547522b56c5dcddb5a0a8ee305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kil-kai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc156c5956a4f48bcf7a41b07506765b4d2b8c21db4d56e3e5e44f3f4024c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-me (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09000f631a615d871f4787e2d3082d0880daf64c6838e85a632c479379bba9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76a8dffbfa69c5fda7f1747c61d9ca5a8c7cdd394e874c9ffd3563dedd5dabbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...