MAL-2025-173877 Malicious code in diva-banbo-imanumabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 668e6cc1443901facbd425e92f42acb100785af113222373f5b53e9567971ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179136 Malicious code in thambi-yug-yudt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db627a227ac90f17053cb8ff1747657ec5e9f7ecf16c0cbb2bd0fdd5e47b4509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172724 Malicious code in affffri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0db62adb60c18d8c3e91fcc19ffffd1e9a030861df63601671c88d6d50b2229c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176237 Malicious code in munufafai-sui-cagaffs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab8f74e1d9d7f886e5d5141f6b32b3767823dc19839e887a47cefb107fe9a65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175476 Malicious code in keke-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c652053bc81a10f806d5cbd2e506fc747a31accd684ceccf9d7d05cb958022f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173919 Malicious code in diva-banibo-imifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54d753f63b8cc1e5677913f2de7c252f2680b0a12404a6c2ad749cf1af01f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174111 Malicious code in divata-tusnabi-ivna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099666e7404b25909e873da401f141d7d85e6308bcaddcfe9a5b50222382dc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173582 Malicious code in butanah-fipofa-iahfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9677a0ae62435a73bdc790c666d80a4881274e711df2eca76db022c327daa58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satu-anafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d54f8c34b01a4b3f5a9d81bd4047e88f9cfbaa59cd1f7aec9a87faaf75ef5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-igaigna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775c8730c458c4758493cca40185f4fc5dd25d3325c752a2cbfc4a8e3562dddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tuag-ivioaabga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94115146da8f64f08a053ccc3bc28d2406e0e60848c6fb37f4c4d21c8745e6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-bunamab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3dd08418eeaad14cae815becb115c3e0973f8799da2d8271da13fd83bd459e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d10f6cc67ca2f7332020c3b0df7a3bdd45c62f6da98f47d173f9f50f4eafbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4498460026131928c531fde04e8a74796f20aeecd1da5013f5ff59f4719ceb50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tua-inanyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f09caf520040c80dccb18ed8480c5295286e916205bf79f77d1d8c8dc15510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipdsha-haufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c187faa4d7ab4134917484fc42978d0fd7ddffcd23e79fb6aeaa8d897039b95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agdaigoag-agagihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c8c1a1086478341e285851646d41b295d5441bce41452c66bd34f9111a81d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agiggsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dd46458c5522d8252650ff21010ee55acce88b174b8dec3ef654ac4dee5b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusafasdagan-nut-afnaearaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25577f5e9b3c2540f9d62fd6637184a1dd416e728520a1643ceaab9d856c52fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hd-matsafdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8bc040152dfd20d7334b428d8804fef743ac351fbc7b4737b29c142eb43689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...