MAL-2025-177194 Malicious code in nuyar-musadfngi-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f34770ef383fd0b620c9d7e101094443109d1153f0ecd31733ae07b7b1d5368d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177516 Malicious code in poglymer-ognboagah-agsaghohai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70279ce2b7ad65980835274baad3eba75d434eb302d3da346b8facb6fb525f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173971 Malicious code in diva-tugabai-imbuaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7b569458a19053e136397d6193c7d8cac8ea7cb4b72bcf6b94c7d06fa62991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaapa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa504f73b27bcb6d7fc020f3edd812224d05e7c05d846117f8e474277210dce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-fagsihagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025be2ac3e5d803ec35b2b8b7c1fef1e78a3ea02820e462fc8ea82e964fff8bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tuamimva-diabud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a190215345284146760451c15dd1825f043937e83e4c3fa7887c471edd866b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amair-tabigaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c7e4ab3cc3d5de286747b433728e57cce4bdd7b28b7ae1ab97a939abceb4575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipoa-inufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed743862c43ce20f8bd58a7ac5aa110d859e253dd55078e02468395ce468911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e4f1fd8d2cfcfdf2e9d9984f8419bc57a6d4d9059bb5e5ee8b3e3481d0acea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7860a93a2d896aee0d9a7d66bb79553db7ead95b4fe3a6d5e1ee30a963a9ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-id-aiforxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00beb004d2c44837b7feaedec8e4c7c47611b649dafd0a68cb836f25c125a0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adaraamsafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb466adde05012c6ccf8f70f922a091f0cf29be18019ee3b2313091929c8bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyagi-gifafuatuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdd88ea24e7c6cc87335f9950a06c92c3b9ec8a5c891daf17f33dd051c5af2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satidfaf-favfaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08190b631a3e5ca219339ee810378d9bb4c6344fff80b973f4bb24dda5ababcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1fe4e13522846ed5eb5c9124585432e6a0f137692b9e1f9392c9f664fad1054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9170321d24694d6de1f7c8ff8325075ee2efe59c6ee061dcc6517f3685460ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d4bdeb07e208f22088e519b4e0dd13e0b2d4259847a703638727f44112957ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdc0dd270cfd68c3c6bb10f696698f7ec985f4494193568c34b85f4e1e9e725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafsa-darasifaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4145506cd376340dbe9de9af4f50548af550d50260eb05aef25f4ba15b9c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174704 Malicious code in hitachi-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8836ff91b7a12090c7aff974df1a9e1781fd659930a1c1b2e602420607e9a5eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...