MAL-2025-180981 Malicious code in teate-thy-sonic-tufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b37300bfd7ced2dadc2de59a0889de062e980cfe35338b38f96390409b928620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-ggaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3dca11ff3001cac00e6a6b28fc14a5b777992e652da4e3e60394352177b5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satsgamf-ani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6508f9433ad7ae32ac2ce43f15571fc6ba710c0a220031cc259f349f5fdcd869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngasa-nafaugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ce768da8f9b59a1e540d86a778d5f0bf25668fa9dc62845458019993b5a8e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanuga-nut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997dcc2b1a12d5b75f21bf644db5c1c1043376c9ec4d6cc98b957a878bc1e880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautu-gaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 349f9fedd74aadf2543a741a27efdd34e6974d6e84f8aa51cc8f0f89183ce4d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imuamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02ad46413c928031c8294d654b0817a708137727fc354006452594fb74edcc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6521b7dd71fd31189b8fc0a57a79951758f14616593785946fa11f9c8cccfc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-mioapagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c255c87ed6be7ca2338069be33cad0b17de7271ac32e50d4e0537e2316a4340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b79c895dc0b338750b4ed2b2874871c3aac62fb04e0ff9451275e94ae68330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafa-naufgif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a398e27c14fe387fa88eeec96aad162b3e5fa8e00149c70ed52a177a315517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugoft (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c24e48dc9b9de1b127dc22d2b846c406742c7f43905d7665dbc499185532d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fifoana-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4af475ce325329523c28aa6e17a53f66127e2a2286fa0fa2526d360baf787f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-baf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c22f64ded383065623310d4f3e4d02c36e2e5479f7b3c6f2c5684b9c36cbae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93591bf26cc530476f4cb63e8a522f959289492e2d086b0d7037a263614a97b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-ravafavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e12b830dabd20215697867de347eeae94dd53897e4f2a1425fdf22271dfa311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-ahaggafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820e494fdb7650acf06974d3d818e662d84f166e50a41fd106ed2db704a30513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cacf20eaf28be1fe2df8e700d66095c7f11f6a2d917b2efc5ec4f14e6c8f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b20bbdaef9716dfe265b59f77a1807ca4ace303bd8512a11e13b6e7917c39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanugsa-utufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97178a603cff6ba5fcadda0967e342c991efdf2a12cfb696557d813682c32e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...