MAL-2025-179061 Malicious code in thambi-geunme-vers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e768b7e691c0348a703a7fb896dff2254030021cfc7c05b79809d141579afa9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173653 Malicious code in butanaih-asfi-daufufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aee716e07487ae749c775a3efd0743d2ce594f8f2f7b58e7e6a44b1e53d74d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasa-minfas-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abaa63c7aa05565802b7ae19fa996b89e5239ab110c778c8fd18b09ce25f5169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kullaa-jiaajouaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec05b7aa85573ee6bb2afb4ce4f8416e531a2a375114902941621562346a5f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautg-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7004c8efe58b5d144882577e42edafabab61c289e56e4142e542644a8372c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c31a0e432d4f84b559821b775629e7564b577a6b616559efa9b685552729971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaf-radodd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3269a03a64d897c2630f7cc1c79b8cf3684607026aa9f8e3f8b81eeb99e63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakaooai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679687cf56b2b1bf4ada0e3a8606b951fd4b6ce25dbc79afd47661ed44e38c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognbamoah-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2859998fd7209ee3141f99000978b6c41d5bd5c06cbe6480027cbe6ce8daa089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bani-imubaabmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd7258fe172f0926d2441ea0f1dde15765069aabcf2ebc88e617830a562e26f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-memeq-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b67f6a4710b5a97b5087f97914cfeb558cf275dd15128d2b54dc53e196bb110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a09b256f3638d03a7378c13ac831116a6a454bfc072105048cf63f2bb8e9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tuai-inab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aaa32aa12f0a86e44ea8a0d79d97dce272d0f90856a99102b2a18d8bfa46942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fifaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e38ffc250c0a966038ab4015cf4ad1fed6c651ebb6d97b6847911ae3706f88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ecba93a2996cb1e3759f1b3309dbe7abde64cf45ee1e55ed3b5b2f2f1f241f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-dagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b26e6deb8f5bb15245c96778d0aa342eb86fa071a7366b12fb717ad6dbb076e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adaoag-agaagisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36e2740f1fbb3b3581562783738b28b7a70af64d9f482d0f45168def01421e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176959 Malicious code in nurnua-sutif-dagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b26e6deb8f5bb15245c96778d0aa342eb86fa071a7366b12fb717ad6dbb076e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179360 Malicious code in unimna-satiof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b0e8086f59735b3ffb323f4228b6111b7185fe1f2eb4c8fce704681da3ad84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174193 Malicious code in godi-tufufaja-inubfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001c51f80098ebd59e59b3556d67add19d28628aa1b993e132b0c0fb4b9fe010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...